last executing test programs:

16.704818438s ago: executing program 2 (id=5962):
unshare(0x62000000)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'sit0\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x17}, 0x1e, r2})
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000004c40)={@ipv4={'\x00', '\xff\xff', @remote}, r2}, 0x14)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48)
r4 = socket$kcm(0x29, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000080)={r0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.285352322s ago: executing program 0 (id=5968):
r0 = socket$caif_stream(0x25, 0x1, 0x1)
fstat(r0, &(0x7f0000000a00))

16.285186398s ago: executing program 2 (id=5969):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x9b}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
perf_event_open(&(0x7f0000003280)={0x5, 0x90, 0x1, 0x6, 0x3, 0x1, 0x0, 0x5, 0xcd010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000003240), 0x1}, 0x0, 0x7ff, 0x5, 0x8, 0xd, 0x0, 0xd04, 0x0, 0x800, 0x0, 0xd}, 0x0, 0x4, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x14, 0x1, 0x800, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r1=>0x0}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x2, 0x1800}]}}]}, 0x48}}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@ifindex=r4, r0, 0x35, 0xc, 0x0, @void, @value=r0, @void, @void, r1}, 0x20)

16.207365303s ago: executing program 0 (id=5970):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$tipc(0x1e, 0x5, 0x0)
recvmmsg(r1, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000005b40)=""/152, 0x98}], 0x1}, 0x5}], 0x1, 0x2, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000600)={r2, &(0x7f0000000740)="dd8cdebcf43ac72ecb116f083218899e35fa3273b0fa68b20e69da5f169ce902869886560fde745f0276d0e6d7c3414dfd65fa4d674e9f3a003842c791d79e34cc6125e779c32c8a5a12f586d5746df07ef395231e58f72e14db316d540c093c8c3b1f8d2e28805a94adb39021af6133bbc8e6fc131e3c8924c7807e8a0545a68a0724295cef5c4bb5c287be8e574fc3f8141a68de9212fd34fc030811001ef81e03cf2e45fb566d1eb089f96e0bf87873f06ed4612965a7ad", &(0x7f00000005c0)=""/30}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x0, 0x56, 0x6a, &(0x7f0000000800)="faa85d2ea0ce90143c7d81170592058283706e72a37512f8eee79a9213b91c140c476126b262c19c65f80b8e7d0c75509e26604f79010b05b455d24c321ff005871a1c71839a1e59b83af47652d73fbc03585a1e8a50", &(0x7f0000000880)=""/106, 0x8, 0x0, 0xef, 0x0, &(0x7f0000000900)="51447a98e8a8384a4dfd4dc5ae921f8d9b7117868dcf3ad826ea8dc5d1d7d09a200787e21689422f4d5ee8c538a0ec74f7b8a76ffa10b68b9d20d0ddf660c5a9c8cbf2cf1d4f25a8bbf10e74734f6b6747ad70fc3d3157dac0d841e3cbe04a2ae186bd337efdc64398eff70ade32798fe3187ad87dd5a5aec1e24571cbb0f2cfedcd07c7f3635abf91a9aff9454a7e5188cd6536f2d594d6b81e4a7d469bd66eb802a9f4ea2b4cd7dbff1ace6162cd085aa20879217bac7e62afa57f9545fea42ae0d301a07e26e860fbb7353d9723d0f2d28c0d3d348db8a72b8c27c7224de92df277fa031e3442ab5fb21591580c", &(0x7f0000000a00), 0x3, 0x0, 0x4}, 0x50)
r3 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="a5e570871d8ff80b34d9b55b78115022e13a6f89eec237c139b5d82fc98828d5ec71d84a53c49895090949695216b4645ab68a315d6a26ab669f834ab6f0077a936c4529a1c81b2f5754bbc2b543e130977a9270b4dfc69cdb45974c3c41744b5bc7a29cb7be035fcb9fdc4016a976d89de7a993ab541babba008cc8b7e069bb3dcf2fcf473dceade9bdecaf0ea9f0932b7a955342db94c084e27cd4edc20266bf758eb8a2d0756ab7850d46f00f7ea9df1b8aed54c551bb28c203a75f1bf3dadeee4e7227fe7e406c", @ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40840)
r4 = accept(0xffffffffffffffff, &(0x7f0000000080)=@ethernet={0x0, @broadcast}, &(0x7f0000000000)=0x80)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r6=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0x2, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r7, 0x89f1, &(0x7f0000000000))
r8 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r8, 0x8)
r9 = accept4(r8, 0x0, 0x0, 0x0)
write(r9, 0x0, 0x0)
writev(r8, &(0x7f0000000c00)=[{&(0x7f0000000a00)='w', 0x1}, {&(0x7f0000000ac0)="433f92e9bcbc9cf4f3e4bd5e4a1d892b78ff2e34b655eb303a53fe94659e0bc4095e197f57cd6ab976122cb3dae2ab0b1f3dabfcaeab4e6379262c2d99", 0x3d}, {&(0x7f0000000b40)="45136a4aa57ff715c01183aa5cb7e85fade8e21af7c0f3cef301ec90b3a7e780620c10fc9c2d9cddd5be76df20bdfb0c79092655218cda192657628a67fadf8443964c3306f3d160dce5cbfcd1a01c14420acd1d461ba92290c1a18defb91dcc53b622e1000dbe7b97aba888a6461c9d49e3a32fe57a7c557eac412faba31c4966c2fbe29e5ef36055fcbc46b0cc09a2115ef967be6f4508b46f58b9d6af07b5550db06ecd160a35e99803d3f6cfc24a58ee9a56c1", 0xb5}], 0x3)
sendto$inet6(r9, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, 0x8)
close(r9)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="519ab4a5", @ANYRES16=r5, @ANYBLOB="000227bd7000fddbdf257600000008000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004850}, 0x10)
pipe(&(0x7f0000000080)={<r10=>0xffffffffffffffff})
vmsplice(r10, &(0x7f0000000040)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0xfffffffffffffea6}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882d6939c7c4e4727f8d8979ce9bb883f9213faf51834517bed4d0bfc521236439a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d237e66"}, {&(0x7f0000002c40)="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"}], 0x1, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb5, &(0x7f0000000340)=""/181, 0x0, 0x50, '\x00', 0x0, @fallback=0xe}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

16.207019086s ago: executing program 2 (id=5971):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, 0x3b, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x20}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x10)
r3 = getpid()
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xfffffffffffffe36, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
ioctl$sock_netdev_private(r4, 0x89fb, &(0x7f0000000280)="9adfde7402abcab646e8d8e1280ea60565ca42bd")
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r11=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x40}, 0x4, 0x700000000000000}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r7, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x4004)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RELOAD(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r13, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)

16.140726281s ago: executing program 0 (id=5974):
syz_clone(0x22000100, &(0x7f0000000ac0)="1163404a0542f9f4d89bf565666afe01f347476cfccf24828a40885a1ea6e2154940fefdc938045c0253ad1dcecd48cd50a9a1ad1c764835f02a2114974903e9c5f0a16e911996aa6242e3c4772d350d0c3ce5b46400fc6be2a9a34570dbebfaba2fbc8709ede79ac9d9c01c795d1a6dc2f34e67094305261b4ed899a48f299f0812f6daa646ce204ec2a1af3481a779b0e68e23dbc89212c913eeb53ffcff265a59124465d83125899cb7a4a2f62addce30c5fee18d3446dd1426ce98a1f0", 0xbf, &(0x7f0000000b80), &(0x7f0000000bc0), &(0x7f0000000c00)="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")

15.993463237s ago: executing program 0 (id=5976):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x3, 0x0, 0x0, 0x11, 0x3}, @typedef={0x0, 0x0, 0x0, 0x4}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x51}, 0x20)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)

15.993293747s ago: executing program 0 (id=5977):
perf_event_open(&(0x7f0000003280)={0x5, 0x80, 0x1, 0x6, 0x3, 0x1, 0x7000000, 0x5, 0xcd010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000003240), 0x1}, 0x0, 0x7ff, 0x5, 0x8, 0xd, 0x0, 0xd04, 0x0, 0x800, 0x0, 0xd}, 0x0, 0x4, 0xffffffffffffffff, 0x8)

15.992845786s ago: executing program 1 (id=5978):
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r4=>0x0})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, r8, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x1, {0x2, 0x0, 0x4}, 0x2}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xffff, 0x8}, {0xfff1, 0x9}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4008800)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}}, 0x8010)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/480, @ANYRESOCT=r10, @ANYRESHEX=0x0, @ANYRES64=r5, @ANYRES32=r3, @ANYRESDEC=r5, @ANYRES64=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5, 0xb, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, r8, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) (async)
bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x1, {0x2, 0x0, 0x4}, 0x2}, 0x18) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xffff, 0x8}, {0xfff1, 0x9}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4008800) (async)
pipe(&(0x7f0000000000)) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x30}}, 0x8010) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000002d350000000000006507000002000000070700004a0000007d75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b672d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400"/480, @ANYRESOCT=r10, @ANYRESHEX=0x0, @ANYRES64=r5, @ANYRES32=r3, @ANYRESDEC=r5, @ANYRES64=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) (async)

15.903366792s ago: executing program 0 (id=5979):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100120000c000000e800000000000000"], 0x18}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d001480080018"], 0x38}, 0x1, 0x0, 0x0, 0x48855}, 0xc000)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215ec000)
close(0x3)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa)
poll(&(0x7f0000000140)=[{r3, 0x93d4}, {r2}], 0x2, 0x9)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'dummy0\x00', 0x1}, 0x18)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x28080)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b04000000000000000000000080000000000000a4461fdde5c36da4cbb118421724f4228db911892243fe81e924fdf46f6a48484fe750b20fcbe0ca80da83fcc7a45c4467a982528f9c0caa1eea6b83efdff7bed911cefe20e60d90b4e04b2cc3e89495848fc97bd791c7d1a1bacf49702f68ca1116027035dcbb0ff778551ca5e062019106abb8a0fed5277e0c548e23ec1afa6d3e70ec21b62b8dc6214788ef23d3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffe0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x48}, 0x94)

15.727272721s ago: executing program 1 (id=5980):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x38, 0x25, 0x109, 0x870bd22, 0x25dfdbfd, {0x2}, [@nested={0x10, 0x3d, 0x0, 0x1, [@typed={0x9, 0x153, 0x0, 0x0, @str='SEG6\x00'}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @nested={0xc, 0x3e, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

15.672585598s ago: executing program 1 (id=5981):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a006e7a551694e4b782000002"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018130000", @ANYRES32=r0, @ANYBLOB="0000000000000000850000002600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x66}, 0x94)
unshare(0x20000400)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$MRT_TABLE(r1, 0x0, 0xcf, 0x0, 0x0)
r2 = socket$caif_stream(0x25, 0x1, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
fstat(r2, &(0x7f0000000a00))

15.67213824s ago: executing program 1 (id=5982):
syz_clone(0x86106000, &(0x7f0000002180)="6775911f2d9c4350b36857af7d3b2c315f212d605d86ac8f4652496794de77dccd862fda7d63a9a586b8ed8ff792f30e3d7afe91b3cf2092394eb2838e408a26f7acf058c1477baac008eb2fc5d9e22b2fbfa315d83b8c2e2c6d1a911b2e94458d14a362531ebb9fcae797f299df00da68ecbe3fbfba6aee43dfb2fba7627871622234df3b4e2be134b69179097890d81b562e7f912d01fa163de8266baad78d647cbabcd28e3ed118f47401825ad1870dc25c2e51ec45d6dad226bd69402ece4bf3e7da53db61dc442f4f352cf756047ab68c4a28d0f857f3b8034900223401d5c6a3fe6a5eb552c78abdd6389c78", 0xef, &(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300)="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")

15.615133387s ago: executing program 2 (id=5983):
syz_clone(0x10000200, &(0x7f0000000580)="3c82f14fe7db88d9486d17a39525e22a3392fdd3d6ecedb41f10349d5d93bdec2a13c0edd42736e5f22ef445a0b1505cdceb38f2de81a9ca7baf0228ca8005cd6efb43e7c28ef7527ae441dd7823bff45793c5268a00bfcf82294c89b4509afef5e5705b35cd23eb8db3a29f7cdda7473591087ff467ba33f56093e3a7196082e705930ba4374d42fb2387ec9467", 0x8e, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="e332de3f55981b560bb96c62")

15.614954056s ago: executing program 2 (id=5984):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64)
writev(r4, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000040)='\x00\x00\x00\x005\x00W', 0x7}], 0x2) (async, rerun: 64)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)='U', 0xfdef}], 0x1}, 0x3)

15.534966082s ago: executing program 1 (id=5985):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4001af84, &(0x7f0000000040)={0x2, 0xffff})

15.532465523s ago: executing program 1 (id=5986):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="890000000000000095000000000b00003f17b1beb52a0b451fa0aa9a62743ba31bc47cf8fc685710d9448e501e269a69e04a0ed974df84fc2167f3e7835aaf6e2ba338b9fbdb4888d3e6852def2897e06ea0f8ca475c13b19764"], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0xfffffffffffffd9d, 0x90, 0x0, 0x100000}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', <r1=>0x0, 0x10, 0x8000, 0x0, 0xd50, {{0x7, 0x4, 0x3, 0x38, 0x1c, 0x64, 0x0, 0x2, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@end, @generic={0x94, 0x3, "15"}, @ra={0x94, 0x4}]}}}}})
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000016000000000800007f00000092000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000e7a7a6ea56633b74e592676d3751c286ef73928c6ab5b03c427030ca88e10f11c678f06d6cb8269b02f66419e5dfe5d02b47b1c15cfd9266d6ac638d76ccfe78e5fe163538f5f6c9c01f451a18a37216f800"/114], 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x800005, 0x0, 0xff, 0xa, 0xe, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x80000, 0x25dfdbfd, {0x2, 0x8, 0x52, 0xfe, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LABEL={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x4040854)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r5, 0x8b32, &(0x7f0000000040))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8080100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x2, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000)

15.464434023s ago: executing program 2 (id=5987):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r2, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r2}}, 0x1c)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0xffffd8ee}, 0x10)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x87, 0xfc, 0x9, 0xfffff01c}, {0x6, 0x8, 0x5, 0x12e}]}, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r9, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x40000)
r10 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0)
sendmsg$nl_crypto(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x800, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000)
syz_clone(0x2083000, &(0x7f0000000440)="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", 0x1ae, &(0x7f0000000000), &(0x7f0000003400), &(0x7f0000000040)="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")
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r2, 0x22a6f000)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r13=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9, 0x101, 0x4, 0x408, 0x1, 0x80000001, '\x00', r13, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0xf}, 0x50)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r11, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x8001)

81.633962ms ago: executing program 32 (id=5979):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000100120000c000000e800000000000000"], 0x18}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042800c00018006000600800a0000140002800d001480080018"], 0x38}, 0x1, 0x0, 0x0, 0x48855}, 0xc000)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x810, 0xffffffffffffffff, 0x215ec000)
close(0x3)
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa)
poll(&(0x7f0000000140)=[{r3, 0x93d4}, {r2}], 0x2, 0x9)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4620, @empty}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'dummy0\x00', 0x1}, 0x18)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x28080)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b04000000000000000000000080000000000000a4461fdde5c36da4cbb118421724f4228db911892243fe81e924fdf46f6a48484fe750b20fcbe0ca80da83fcc7a45c4467a982528f9c0caa1eea6b83efdff7bed911cefe20e60d90b4e04b2cc3e89495848fc97bd791c7d1a1bacf49702f68ca1116027035dcbb0ff778551ca5e062019106abb8a0fed5277e0c548e23ec1afa6d3e70ec21b62b8dc6214788ef23d3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffe0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x48}, 0x94)

71.889786ms ago: executing program 33 (id=5986):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="890000000000000095000000000b00003f17b1beb52a0b451fa0aa9a62743ba31bc47cf8fc685710d9448e501e269a69e04a0ed974df84fc2167f3e7835aaf6e2ba338b9fbdb4888d3e6852def2897e06ea0f8ca475c13b19764"], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0xfffffffffffffd9d, 0x90, 0x0, 0x100000}, 0x80)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'gre0\x00', &(0x7f0000000040)={'gre0\x00', <r1=>0x0, 0x10, 0x8000, 0x0, 0xd50, {{0x7, 0x4, 0x3, 0x38, 0x1c, 0x64, 0x0, 0x2, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@end, @generic={0x94, 0x3, "15"}, @ra={0x94, 0x4}]}}}}})
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000016000000000800007f00000092000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000e7a7a6ea56633b74e592676d3751c286ef73928c6ab5b03c427030ca88e10f11c678f06d6cb8269b02f66419e5dfe5d02b47b1c15cfd9266d6ac638d76ccfe78e5fe163538f5f6c9c01f451a18a37216f800"/114], 0x50)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x800005, 0x0, 0xff, 0xa, 0xe, 0x1}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@ipv4_newaddr={0x3c, 0x14, 0x509, 0x80000, 0x25dfdbfd, {0x2, 0x8, 0x52, 0xfe, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LABEL={0x14, 0x3, 'bridge0\x00'}]}, 0x3c}}, 0x4040854)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r5, 0x8b32, &(0x7f0000000040))
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8080100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, 0x2, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8000)

0s ago: executing program 34 (id=5987):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000001c0)={r2, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r2}}, 0x1c)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r4, 0x0)
r5 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r6 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r6, &(0x7f0000000280)={0x28, 0x0, 0xffffd8ee}, 0x10)
connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x87, 0xfc, 0x9, 0xfffff01c}, {0x6, 0x8, 0x5, 0x12e}]}, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x3c, r9, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x40000)
r10 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'pcbc(fcrypt-generic)\x00'}}}, 0xe0}}, 0x0)
sendmsg$nl_crypto(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x800, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x20}, 0x4000)
syz_clone(0x2083000, &(0x7f0000000440)="2c4a1557d75b5ee96afcff9e7717b4af8d9c1c37b8adbad3355dc58d932c93a50f160711620600ab54d29d2994729438c935c90244a29b5e55711ab7387e798f502be78c47601e901d28747562dd2d92c95fea9fcad40cef108bc5cb7862e1c97c6a572dddf0392d9e7c088fd49e4c06ae93bc10ac99953556a661d59ac1d82f95e65bbca8ede9bbc4e549799ea8cc02043b6e19ccee93e554a0f20a50ab4d592f86f7015365dbc96e818c223dcaea0300000000000000dd7dcde8a7c972612b728a7dc33e109f0a13d257e75cf14004f27ec303089dd75e13f174178a0512b9d11d19caf76e1a910325224c8ead51edd2d455d54282a1fd8c1da2435e7779487a47620e84f242bbcf5daa79a4eea3723f760764fc9660e26e9209d7549c0763f50600000000000000f95c8a3ac0ab6ffd3b7442d6d4a3fa8598ca17497a0d624a868ae80faa8383546bebc5a27525831cdc70f67cd4b261cf17327aed49fdeebffc29bbab1c9ca77bef4ee2e59b85ba904541c37b17a550f0f72249bb0f44369d12cd7f1ba5395ccea6bd0b7b126f4dcc7f77947ca74a4ea38b63c61c62e4b51a2c4bc3d3a9ccf14f267376df6e", 0x1ae, &(0x7f0000000000), &(0x7f0000003400), &(0x7f0000000040)="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")
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x30, r2, 0x22a6f000)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', <r13=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9, 0x101, 0x4, 0x408, 0x1, 0x80000001, '\x00', r13, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0xf}, 0x50)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r11, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48800}, 0x8001)

kernel console output (not intermixed with test programs):

length.
[  166.344761][T12111] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  166.348449][T12111] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  166.402186][T12115] tipc: Invalid UDP bearer configuration
[  166.402212][T12115] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  166.592174][T12124] bond0: Caught tx_queue_len zero misconfig
[  166.670839][T12131] netlink: 'syz.2.2715': attribute type 1 has an invalid length.
[  166.705694][T12131] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  166.709912][T12131] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  166.710836][T12135] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  166.716686][T12131] bond3: (slave ip6gre1): making interface the new active one
[  166.720921][T12131] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[  166.768428][T12141] netlink: 'syz.1.2719': attribute type 21 has an invalid length.
[  166.784167][T12141] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2719'.
[  166.893557][T12155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2726'.
[  166.911407][T12155] 8021q: adding VLAN 0 to HW filter on device bond4
[  166.926074][T12155] macvlan0: entered allmulticast mode
[  166.928832][T12155] veth0_to_bond: entered promiscuous mode
[  166.931724][T12155] veth0_to_bond: entered allmulticast mode
[  166.935113][T12155] bond4: (slave macvlan0): Enslaving as an active interface with an up link
[  167.119816][T12171] trusted_key: syz.1.2734 sent an empty control message without MSG_MORE.
[  167.167157][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'.
[  167.170987][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'.
[  167.186294][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'.
[  167.195503][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'.
[  167.201334][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2737'.
[  167.213389][T12179] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2737'.
[  167.222805][T12181] lo speed is unknown, defaulting to 1000
[  167.302287][T12187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2740'.
[  167.768177][T12201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2746'.
[  167.934040][T12204] lo speed is unknown, defaulting to 1000
[  168.107865][T12202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  168.392499][T12216] lo speed is unknown, defaulting to 1000
[  168.586565][T12233] syzkaller0: entered promiscuous mode
[  168.588463][T12233] syzkaller0: entered allmulticast mode
[  168.593511][T12233] simple: basic_2
[  168.594955][T12233] simple: basic_4
[  168.596137][T12233] simple: basic_6
[  168.597320][T12233] simple: basic_8
[  168.598579][T12233] simple: basic_10
[  168.599892][T12233] simple: basic_12
[  168.601083][T12233] simple: basic_14
[  168.602291][T12233] simple: basic_16
[  168.603522][T12233] simple: basic_18
[  168.604731][T12233] simple: basic_20
[  168.605928][T12233] simple: basic_22
[  168.607127][T12233] simple: basic_24
[  168.608330][T12233] simple: basic_26
[  168.609650][T12233] simple: basic_28
[  168.610851][T12233] simple: basic_30
[  168.612061][T12233] simple: basic_32
[  168.613231][T12233] simple: basic_34
[  168.614422][T12233] 0: reclassify loop, rule prio 0, protocol 800
[  168.923748][T12210] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  168.995235][T12252] veth1_to_batadv: Caught tx_queue_len zero misconfig
[  169.473875][T12293] tunl0: Caught tx_queue_len zero misconfig
[  170.463277][T12323] lo speed is unknown, defaulting to 1000
[  170.471781][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 45 seconds
[  170.476133][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 45 seconds
[  170.481166][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 45 seconds
[  170.485611][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 45 seconds
[  170.883979][T12350] netlink: 'syz.2.2811': attribute type 21 has an invalid length.
[  171.053914][T12361] netlink: 'syz.0.2817': attribute type 1 has an invalid length.
[  171.056411][T12361] netlink: 'syz.0.2817': attribute type 3 has an invalid length.
[  171.078824][T12361] netlink: 'syz.0.2817': attribute type 1 has an invalid length.
[  171.306375][T12384] IPv6: NLM_F_CREATE should be specified when creating new route
[  171.316653][T12384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  171.319795][T12384] IPv6: NLM_F_CREATE should be set when creating new route
[  171.441129][T12394] syzkaller0: entered promiscuous mode
[  171.442952][T12394] syzkaller0: entered allmulticast mode
[  171.674689][T12420] netlink: 'syz.0.2841': attribute type 8 has an invalid length.
[  171.697924][T12422] netlink: 'syz.2.2842': attribute type 32 has an invalid length.
[  172.261733][T12481] lo speed is unknown, defaulting to 1000
[  172.395887][T12496] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  172.491858][   T33] audit: type=1107 audit(1772933092.924:3): pid=12503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  172.702856][T12523] sit0: entered allmulticast mode
[  172.711519][T12523] sit0: left allmulticast mode
[  172.792109][T12526] syzkaller0: entered promiscuous mode
[  172.795085][T12526] syzkaller0: entered allmulticast mode
[  173.038120][T12540] __nla_validate_parse: 9 callbacks suppressed
[  173.038133][T12540] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2893'.
[  173.069155][T12540] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2893'.
[  173.072535][T12540] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2893'.
[  173.133128][T12544] syzkaller0: entered promiscuous mode
[  173.135533][T12544] syzkaller0: entered allmulticast mode
[  173.154922][T12546] netlink: zone id is out of range
[  173.157287][T12546] netlink: zone id is out of range
[  173.160514][T12546] netlink: zone id is out of range
[  173.162651][T12546] netlink: zone id is out of range
[  173.164804][T12546] netlink: zone id is out of range
[  173.166891][T12546] netlink: zone id is out of range
[  173.169436][T12546] netlink: zone id is out of range
[  173.172034][T12546] netlink: zone id is out of range
[  173.174280][T12546] netlink: zone id is out of range
[  173.433815][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2904'.
[  173.606528][T12582] netlink: 'syz.0.2914': attribute type 11 has an invalid length.
[  173.666358][T12592] macvtap0: entered promiscuous mode
[  173.668671][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2918'.
[  173.679687][T12592] veth0_macvtap: left promiscuous mode
[  173.733634][T12592] macvtap0 (unregistering): left promiscuous mode
[  173.884976][T12598] syzkaller0: entered promiscuous mode
[  173.886779][T12598] syzkaller0: entered allmulticast mode
[  174.669836][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2928'.
[  174.683281][T12615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.686370][T12615] IPv6: NLM_F_CREATE should be set when creating new route
[  174.694382][T12615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.697417][T12615] IPv6: NLM_F_CREATE should be set when creating new route
[  174.968694][T12636] Bluetooth: MGMT ver 1.23
[  175.236079][T12663] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2950'.
[  175.391389][T12685] geneve0: left promiscuous mode
[  175.409434][T12685] team0 (unregistering): Failed to send port change of device geneve0 via netlink (err -105)
[  175.414514][T12685] team0 (unregistering): Port device geneve0 removed
[  175.477485][T12695] netlink: 'syz.0.2964': attribute type 10 has an invalid length.
[  175.480780][T12694] netlink: 'syz.2.2965': attribute type 13 has an invalid length.
[  175.487019][T12695] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2964'.
[  175.613523][T12701] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2968'.
[  175.732187][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2975'.
[  175.749683][T12709] nbd2: detected capacity change from 0 to 63
[  175.752102][T12714] block nbd2: NBD_DISCONNECT
[  175.755927][T12714] block nbd2: Disconnected due to user request.
[  175.759525][T12714] block nbd2: shutting down sockets
[  175.772418][    C0] blk_print_req_error: 138 callbacks suppressed
[  175.772432][    C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.778009][    C0] buffer_io_error: 138 callbacks suppressed
[  175.778021][    C0] Buffer I/O error on dev nbd2, logical block 0, async page read
[  175.783484][    C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.786580][    C0] Buffer I/O error on dev nbd2, logical block 1, async page read
[  175.789413][    C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.792770][    C0] Buffer I/O error on dev nbd2, logical block 2, async page read
[  175.795376][    C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.798430][    C0] Buffer I/O error on dev nbd2, logical block 3, async page read
[  175.804041][ T8988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.807518][ T8988] Buffer I/O error on dev nbd2, logical block 0, async page read
[  175.811467][ T8988] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.815057][ T8988] Buffer I/O error on dev nbd2, logical block 1, async page read
[  175.817601][ T8988] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.821075][ T8988] Buffer I/O error on dev nbd2, logical block 2, async page read
[  175.823799][ T8988] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.827167][ T8988] Buffer I/O error on dev nbd2, logical block 3, async page read
[  175.830442][ T8988] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.834006][ T8988] Buffer I/O error on dev nbd2, logical block 0, async page read
[  175.850188][ T8988] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  175.854322][ T8988] Buffer I/O error on dev nbd2, logical block 1, async page read
[  175.859266][ T8988] ldm_validate_partition_table(): Disk read failed.
[  175.862135][ T8988] Dev nbd2: unable to read RDB block 0
[  175.864518][ T8988]  nbd2: unable to read partition table
[  175.880607][ T8988] ldm_validate_partition_table(): Disk read failed.
[  175.882902][ T8988] Dev nbd2: unable to read RDB block 0
[  175.887485][ T8988]  nbd2: unable to read partition table
[  175.951064][T12730] netlink: 'syz.2.2982': attribute type 2 has an invalid length.
[  175.953528][T12730] netlink: 'syz.2.2982': attribute type 8 has an invalid length.
[  176.112646][T12739] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  176.195594][T12743] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.250552][T12743] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.310175][T12743] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.355869][T12752] lo speed is unknown, defaulting to 1000
[  176.388369][T12743] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.488978][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.501587][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.527560][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.538628][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.401197][T12836] lo speed is unknown, defaulting to 1000
[  177.825875][T12854] syzkaller0: entered promiscuous mode
[  177.827669][T12854] syzkaller0: entered allmulticast mode
[  178.043062][T12870] batadv_slave_0: Caught tx_queue_len zero misconfig
[  178.114741][T12873] syzkaller0: entered promiscuous mode
[  178.116529][T12873] syzkaller0: entered allmulticast mode
[  178.142533][T12873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.160429][T12872] tipc: Resetting bearer <eth:syzkaller0>
[  178.222649][T12872] tipc: Disabling bearer <eth:syzkaller0>
[  178.296625][T12886] __nla_validate_parse: 8 callbacks suppressed
[  178.296637][T12886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3052'.
[  178.444844][T12904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3061'.
[  178.517209][T12913] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3066'.
[  178.681933][T12925] tunl0: Caught tx_queue_len zero misconfig
[  178.818354][T12938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3076'.
[  179.513584][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 54 seconds
[  179.517965][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 54 seconds
[  179.521909][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 54 seconds
[  179.526537][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 54 seconds
[  180.052348][T12975] ieee802154 phy0 wpan0: encryption failed: -22
[  180.294472][T12993] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3096'.
[  180.305581][  T848] lo speed is unknown, defaulting to 1000
[  180.369819][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3098'.
[  180.396058][T13002] C: entered promiscuous mode
[  180.397821][T13002] team_slave_1: entered promiscuous mode
[  180.411393][T13002] macvtap1: entered promiscuous mode
[  180.413206][T13002] team0: entered promiscuous mode
[  180.415325][T13002] macvtap1: entered allmulticast mode
[  180.418490][T13002] team0: entered allmulticast mode
[  180.424794][T13002] C: entered allmulticast mode
[  180.428888][T13002] team_slave_1: entered allmulticast mode
[  180.443355][T13002] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  181.051620][T13083] netlink: 'syz.1.3111': attribute type 21 has an invalid length.
[  181.054132][T13083] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3111'.
[  181.056966][T13083] netlink: 'syz.1.3111': attribute type 5 has an invalid length.
[  181.062681][T13083] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3111'.
[  181.102761][T13089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3112'.
[  181.111586][T13089] veth1_to_hsr: entered promiscuous mode
[  181.113680][T13089] macvtap2: entered promiscuous mode
[  181.115658][T13089] macvtap2: entered allmulticast mode
[  181.118078][T13089] veth1_to_hsr: entered allmulticast mode
[  181.387602][T13113] nbd: socks must be embedded in a SOCK_ITEM attr
[  181.757855][T13140] xt_NFQUEUE: number of total queues is 0
[  182.133104][T13160] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3143'.
[  182.235142][T13167] dummy0: entered promiscuous mode
[  182.237482][T13167] vlan0: entered promiscuous mode
[  182.288883][ T5808] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  182.326529][ T5808] CPU: 0 UID: 0 PID: 5808 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  182.326544][ T5808] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.326549][ T5808] Call Trace:
[  182.326553][ T5808]  <TASK>
[  182.326556][ T5808]  dump_stack_lvl+0xe8/0x150
[  182.326572][ T5808]  dump_header+0xd3/0x4c0
[  182.326582][ T5808]  oom_kill_process+0x3ab/0x970
[  182.326593][ T5808]  out_of_memory+0x106c/0x1410
[  182.326600][ T5808]  ? percpu_ref_put+0x19/0x180
[  182.326610][ T5808]  ? __pfx___mutex_lock+0x10/0x10
[  182.326622][ T5808]  ? __pfx_out_of_memory+0x10/0x10
[  182.326628][ T5808]  ? do_raw_spin_unlock+0x4d/0x210
[  182.326639][ T5808]  try_charge_memcg+0xc53/0x1560
[  182.326648][ T5808]  ? __lock_acquire+0x6b5/0x2cf0
[  182.326661][ T5808]  ? __pfx_try_charge_memcg+0x10/0x10
[  182.326667][ T5808]  ? xa_load+0x60/0x210
[  182.326678][ T5808]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  182.326687][ T5808]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  182.326696][ T5808]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  182.326704][ T5808]  __swap_cache_prepare_and_add+0x52a/0x700
[  182.326722][ T5808]  swap_cache_alloc_folio+0xf1/0x240
[  182.326732][ T5808]  swap_cluster_readahead+0x369/0x690
[  182.326744][ T5808]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  182.326757][ T5808]  ? get_vma_policy+0x27b/0x3c0
[  182.326767][ T5808]  swapin_readahead+0x196/0xc50
[  182.326776][ T5808]  ? filemap_map_pages+0x185/0x2050
[  182.326788][ T5808]  ? __pfx_swapin_readahead+0x10/0x10
[  182.326798][ T5808]  ? swap_table_get+0x1e/0x260
[  182.326806][ T5808]  ? swap_table_get+0x1e/0x260
[  182.326814][ T5808]  ? swap_table_get+0x1e/0x260
[  182.326823][ T5808]  ? swap_table_get+0x216/0x260
[  182.326832][ T5808]  ? swap_cache_get_folio+0x513/0x520
[  182.326843][ T5808]  do_swap_page+0x54f/0x58d0
[  182.326852][ T5808]  ? __lock_acquire+0x6b5/0x2cf0
[  182.326866][ T5808]  ? do_swap_page+0x12c/0x58d0
[  182.326875][ T5808]  ? __pfx_do_swap_page+0x10/0x10
[  182.326882][ T5808]  ? __pte_offset_map+0x1ae/0x240
[  182.326893][ T5808]  ? pte_offset_map_rw_nolock+0xea/0x160
[  182.326904][ T5808]  handle_mm_fault+0x12d2/0x3310
[  182.326918][ T5808]  ? handle_mm_fault+0xee/0x3310
[  182.326930][ T5808]  ? __pfx_handle_mm_fault+0x10/0x10
[  182.326938][ T5808]  ? lock_vma_under_rcu+0x45a/0x500
[  182.326954][ T5808]  do_user_addr_fault+0xa73/0x1340
[  182.326966][ T5808]  ? rcu_is_watching+0x15/0xb0
[  182.326977][ T5808]  ? trace_page_fault_user+0x84/0x210
[  182.326986][ T5808]  exc_page_fault+0x6a/0xc0
[  182.326998][ T5808]  asm_exc_page_fault+0x26/0x30
[  182.327005][ T5808] RIP: 0033:0x7f49db26a7b7
[  182.327014][ T5808] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 00 b0 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 ae ed 00 48 01 d1 39 7c 24
[  182.327019][ T5808] RSP: 002b:00007ffe271ccae0 EFLAGS: 00010206
[  182.327027][ T5808] RAX: 0000001b2fa24000 RBX: 000000000000089c RCX: 000000000002c6f0
[  182.327032][ T5808] RDX: 0000000001507498 RSI: 00007ffe271ccb70 RDI: 0000000000000000
[  182.327036][ T5808] RBP: 00007ffe271ccb1c R08: 7fffffffffffffff R09: 3fffffffffffffff
[  182.327040][ T5808] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  182.327045][ T5808] R13: 00000000000927c0 R14: 000000000002c5f7 R15: 00007ffe271ccb70
[  182.327055][ T5808]  </TASK>
[  182.327058][ T5808] memory: usage 307200kB, limit 307200kB, failcnt 518
[  182.391057][T13176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.439420][ T5808] memory+swap: usage 296376kB, limit 9007199254740988kB, failcnt 0
[  182.442066][ T5808] kmem: usage 296100kB, limit 9007199254740988kB, failcnt 0
[  182.458428][ T5808] Memory cgroup stats for /syz1:
[  182.458803][ T5808] cache 0
[  182.467542][ T5808] rss 0
[  182.468511][ T5808] rss_huge 0
[  182.470234][ T5808] shmem 0
[  182.471209][ T5808] mapped_file 0
[  182.472394][ T5808] dirty 0
[  182.473584][ T5808] writeback 0
[  182.474796][ T5808] workingset_refault_anon 2
[  182.476298][ T5808] workingset_refault_file 0
[  182.477879][ T5808] swap 98304
[  182.490962][ T5808] swapcached 110592
[  182.494336][T13176] tipc: Resetting bearer <eth:syzkaller0>
[  182.496954][ T5808] pgpgin 96392
[  182.498085][ T5808] pgpgout 96389
[  182.499584][ T5808] pgfault 195113
[  182.504988][ T5808] pgmajfault 6
[  182.506513][ T5808] inactive_anon 12288
[  182.507982][ T5808] active_anon 0
[  182.519335][ T5808] inactive_file 0
[  182.520570][ T5808] active_file 0
[  182.521727][ T5808] unevictable 0
[  182.522900][ T5808] hierarchical_memory_limit 314572800
[  182.525109][ T5808] hierarchical_memsw_limit 9223372036854771712
[  182.527539][ T5808] total_cache 0
[  182.539593][T13175] tipc: Disabling bearer <eth:syzkaller0>
[  182.541575][ T5808] total_rss 0
[  182.542672][ T5808] total_rss_huge 0
[  182.543965][ T5808] total_shmem 0
[  182.545122][ T5808] total_mapped_file 0
[  182.546469][ T5808] total_dirty 0
[  182.547640][ T5808] total_writeback 0
[  182.548880][ T5808] total_workingset_refault_anon 2
[  182.564576][ T5808] total_workingset_refault_file 0
[  182.566206][ T5808] total_swap 98304
[  182.567440][ T5808] total_swapcached 110592
[  182.568888][ T5808] total_pgpgin 96392
[  182.585401][ T5808] total_pgpgout 96389
[  182.586801][ T5808] total_pgfault 195120
[  182.588147][ T5808] total_pgmajfault 6
[  182.599203][ T5808] total_inactive_anon 12288
[  182.600800][ T5808] total_active_anon 0
[  182.602108][ T5808] total_inactive_file 0
[  182.603525][ T5808] total_active_file 0
[  182.604847][ T5808] total_unevictable 0
[  182.606221][ T5808] anon_cost 0
[  182.607469][ T5808] file_cost 0
[  182.608548][ T5808] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3137,pid=13147,uid=0
[  182.630467][ T5808] Memory cgroup out of memory: Killed process 13147 (syz.1.3137) total-vm:104200kB, anon-rss:1244kB, file-rss:21576kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  182.734884][T13188] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.802874][T13188] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.862906][T13195] netlink: 'syz.2.3159': attribute type 1 has an invalid length.
[  182.880555][T13188] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.924322][T13188] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.005631][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.015024][   T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.023812][   T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.034028][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.157693][T13216] ieee802154 phy0 wpan0: encryption failed: -22
[  183.512122][T13255] lo speed is unknown, defaulting to 1000
[  183.938207][T13285] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  184.035155][T13290] __nla_validate_parse: 1 callbacks suppressed
[  184.035167][T13290] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3201'.
[  184.270485][T13305] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3208'.
[  184.515171][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3219'.
[  184.519885][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3219'.
[  184.712532][T13343] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3226'.
[  184.972151][T13373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.015978][T13377] veth1_to_team: entered promiscuous mode
[  185.024995][T13377] veth1_to_team: left promiscuous mode
[  185.223808][T13386] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  185.518820][T13398] syzkaller1: entered promiscuous mode
[  185.521656][T13398] syzkaller1: entered allmulticast mode
[  185.868188][T13409] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3256'.
[  186.231672][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  186.284574][T13426] lo speed is unknown, defaulting to 1000
[  186.335760][T13430] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3263'.
[  186.933087][T13477] netlink: 'syz.2.3287': attribute type 5 has an invalid length.
[  187.012403][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3293'.
[  187.036941][T13492] netlink: 'syz.0.3294': attribute type 1 has an invalid length.
[  187.058958][T13492] 8021q: adding VLAN 0 to HW filter on device bond7
[  187.089518][T13492] bond7: (slave veth7): Enslaving as an active interface with a down link
[  187.092478][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'.
[  187.096867][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'.
[  187.100949][T13502] net_ratelimit: 393 callbacks suppressed
[  187.100960][T13502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.123619][T13492] bond7: (slave dummy0): making interface the new active one
[  187.130897][T13504] netlink: 'syz.1.3298': attribute type 1 has an invalid length.
[  187.134513][T13492] bond7: (slave dummy0): Enslaving as an active interface with an up link
[  187.159488][T13492] bond7: (slave dummy0): Releasing active interface
[  187.201853][T13510] syzkaller1: entered promiscuous mode
[  187.203708][T13510] syzkaller1: entered allmulticast mode
[  187.426202][T13535] lo speed is unknown, defaulting to 1000
[  187.933018][T13569] lo speed is unknown, defaulting to 1000
[  188.554395][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 63 seconds
[  188.557957][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 63 seconds
[  188.563034][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 63 seconds
[  188.566635][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 63 seconds
[  188.932185][T13635] netlink: 'syz.2.3357': attribute type 1 has an invalid length.
[  188.972521][T13635] bond5: (slave bridge7): making interface the new active one
[  188.976466][T13635] bond5: (slave bridge7): Enslaving as an active interface with an up link
[  188.994473][T13635] 8021q: adding VLAN 0 to HW filter on device bond5
[  189.262811][T13657] __nla_validate_parse: 5 callbacks suppressed
[  189.262824][T13657] netlink: 7920 bytes leftover after parsing attributes in process `syz.0.3367'.
[  189.325923][T13661] netlink: 'syz.2.3368': attribute type 1 has an invalid length.
[  189.329246][T13661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'.
[  189.552946][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3377'.
[  189.561183][T13680] ip6gre3: entered promiscuous mode
[  189.563435][T13680] ip6gre3: entered allmulticast mode
[  189.658527][T13687] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  189.665374][T13687] syzkaller0: entered promiscuous mode
[  189.667171][T13687] syzkaller0: entered allmulticast mode
[  189.677363][T13687] tipc: Resetting bearer <eth:syzkaller0>
[  189.683128][T13686] tipc: Resetting bearer <eth:syzkaller0>
[  189.697421][T13686] tipc: Disabling bearer <eth:syzkaller0>
[  189.920830][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3394'.
[  189.992514][T13719] syzkaller0: entered promiscuous mode
[  189.999763][T13719] syzkaller0: entered allmulticast mode
[  190.142298][T13727] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.520558][T13738] geneve2: entered promiscuous mode
[  190.522602][T13738] geneve2: entered allmulticast mode
[  190.639965][T13751] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3409'.
[  190.812251][T13768] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  190.814607][T13768] IPv6: NLM_F_CREATE should be set when creating new route
[  190.816891][T13768] IPv6: NLM_F_CREATE should be set when creating new route
[  191.056642][T13788] netlink: 'syz.1.3427': attribute type 1 has an invalid length.
[  191.251052][T13797] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3431'.
[  191.296577][T13802] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3433'.
[  191.297679][T13803] netlink: 424 bytes leftover after parsing attributes in process `syz.0.3434'.
[  191.306160][T13803] netlink: 'syz.0.3434': attribute type 1 has an invalid length.
[  191.715045][T13847] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  191.716851][T13844] sctp: [Deprecated]: syz.0.3453 (pid 13844) Use of int in max_burst socket option deprecated.
[  191.716851][T13844] Use struct sctp_assoc_value instead
[  191.818846][T13857] syzkaller0: entered promiscuous mode
[  191.820848][T13857] syzkaller0: entered allmulticast mode
[  192.077661][T13892] xt_hashlimit: max too large, truncated to 1048576
[  192.097609][T13892] xt_bpf: check failed: parse error
[  192.330247][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3489'.
[  192.754257][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3511'.
[  192.841246][T13972] lo: Caught tx_queue_len zero misconfig
[  192.843810][T13972] netem: change failed
[  193.118745][T13993] pim6reg1: entered promiscuous mode
[  193.120579][T13993] pim6reg1: entered allmulticast mode
[  193.266787][T14006] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  193.581761][T14036] xt_CT: No such helper "netbios-ns"
[  193.661000][T14049] sctp: [Deprecated]: syz.0.3546 (pid 14049) Use of int in max_burst socket option.
[  193.661000][T14049] Use struct sctp_assoc_value instead
[  193.751121][T14055] syzkaller0: entered promiscuous mode
[  193.753132][T14055] syzkaller0: entered allmulticast mode
[  193.995910][   T56] block nbd1: Receive control failed (result -32)
[  194.684548][T14126] __nla_validate_parse: 7 callbacks suppressed
[  194.684560][T14126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3581'.
[  195.148907][T14175] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3603'.
[  195.638947][T14222] net veth1_virt_wifi : renamed from virt_wifi0
[  195.705681][T14229] netlink: 'syz.1.3626': attribute type 33 has an invalid length.
[  195.710146][T14229] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3626'.
[  195.714486][T14229] `: renamed from team0 (while UP)
[  195.756129][T14231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3627'.
[  195.832771][T14238] bridge0: port 1(team0) entered disabled state
[  195.838066][T14238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3630'.
[  195.844428][T14238] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  195.844758][T14240] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  196.342159][T14270] batman_adv: batadv0: Adding interface: gretap2
[  196.344326][T14270] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  196.359833][T14270] batman_adv: batadv0: Interface activated: gretap2
[  196.955660][T14335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3672'.
[  197.074204][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3676'.
[  197.315421][T14367] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3686'.
[  197.475389][ T5253] udevd[5253]: worker [9544] /devices/virtual/block/nbd0 is taking a long time
[  197.599681][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 72 seconds
[  197.603251][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 72 seconds
[  197.607006][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 72 seconds
[  197.611632][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 72 seconds
[  197.883236][T14420] syzkaller1: entered promiscuous mode
[  197.885027][T14420] syzkaller1: entered allmulticast mode
[  197.924382][T14427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3716'.
[  197.928596][T14427] nbd: couldn't find a device at index 65546
[  197.934723][T14428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3715'.
[  198.668350][T14476] syzkaller1: entered promiscuous mode
[  198.671298][T14476] syzkaller1: entered allmulticast mode
[  198.979359][T14513] netlink: 'syz.1.3753': attribute type 2 has an invalid length.
[  199.452206][T14541] netlink: 'syz.2.3765': attribute type 1 has an invalid length.
[  199.524717][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  199.527255][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  200.418017][T14579] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  200.774830][T14603] __nla_validate_parse: 7 callbacks suppressed
[  200.774845][T14603] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3790'.
[  201.041377][T14621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3798'.
[  201.191567][T14633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3804'.
[  201.259260][T14639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3804'.
[  201.262972][T14639] nbd: nbd64 already in use
[  201.423372][T14654] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3812'.
[  201.455005][T14657] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3815'.
[  202.622028][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3837'.
[  202.679264][T14713] netlink: 'syz.1.3839': attribute type 3 has an invalid length.
[  202.681780][T14713] netlink: 'syz.1.3839': attribute type 1 has an invalid length.
[  202.683369][T14715] syzkaller0: entered promiscuous mode
[  202.684242][T14713] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3839'.
[  202.686028][T14715] syzkaller0: entered allmulticast mode
[  202.691249][T14713] NCSI netlink: No device for ifindex 808464432
[  203.617725][T14787] netlink: 'syz.1.3871': attribute type 9 has an invalid length.
[  203.623714][T14787] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3871'.
[  204.485146][T14848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3894'.
[  204.858849][T14869] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma?
[  204.933468][T14873] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  204.956343][T14873] syzkaller0: entered promiscuous mode
[  204.958417][T14873] syzkaller0: entered allmulticast mode
[  204.961889][T14873] tipc: Resetting bearer <eth:syzkaller0>
[  204.967002][T14872] tipc: Resetting bearer <eth:syzkaller0>
[  206.630829][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 81 seconds
[  206.635470][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 81 seconds
[  206.640623][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 81 seconds
[  206.646043][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 81 seconds
[  206.834316][T14872] tipc: Disabling bearer <eth:syzkaller0>
[  206.849231][   T10] tipc: Node number set to 4278321153
[  206.852571][T14887] netlink: 'syz.1.3911': attribute type 5 has an invalid length.
[  207.300372][T14932] netlink: 'syz.0.3931': attribute type 83 has an invalid length.
[  207.354204][T14939] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3933'.
[  207.471442][   T33] audit: type=1800 audit(1772933127.904:4): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3939" name="blkio.bfq.time_recursive" dev="tmpfs" ino=6565 res=0 errno=0
[  207.685992][T14973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3949'.
[  207.715905][T14976] lo speed is unknown, defaulting to 1000
[  208.021073][T14998] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3959'.
[  208.747526][T15035] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3974'.
[  209.076060][T15054] syzkaller0: entered promiscuous mode
[  209.081496][T15054] syzkaller0: entered allmulticast mode
[  210.162659][T15079] syzkaller0: entered promiscuous mode
[  210.165856][T15079] syzkaller0: entered allmulticast mode
[  210.477658][T15114] lo speed is unknown, defaulting to 1000
[  210.489623][T15106] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.508468][T15106] 8021q: adding VLAN 0 to HW filter on device team0
[  210.512636][T15106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  210.696356][T15125] lo speed is unknown, defaulting to 1000
[  211.118390][T15136] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.4019'.
[  211.141398][T15136] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  211.183797][T15138] netlink: 'syz.0.4020': attribute type 17 has an invalid length.
[  211.186407][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4020'.
[  211.191027][T15138] bond0: option all_slaves_active: invalid value (158)
[  212.139914][T15203] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4050'.
[  212.467924][T15231] lo speed is unknown, defaulting to 1000
[  212.682237][T15251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4073'.
[  212.863718][T15259] vlan3: entered allmulticast mode
[  212.866027][T15259] veth0_to_bond: entered allmulticast mode
[  213.731650][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4084'.
[  213.745473][T15276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  213.862351][T15283] netlink: 'syz.1.4086': attribute type 27 has an invalid length.
[  214.155375][T15304] netlink: 'syz.2.4096': attribute type 1 has an invalid length.
[  214.161297][T15304] netlink: 'syz.2.4096': attribute type 2 has an invalid length.
[  214.242264][T15312] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  214.774832][T15332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4110'.
[  214.848182][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4112'.
[  215.492707][T15388] netlink: 'syz.1.4134': attribute type 10 has an invalid length.
[  215.525593][T15392] syzkaller1: entered promiscuous mode
[  215.527996][T15392] syzkaller1: entered allmulticast mode
[  215.669785][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 90 seconds
[  215.673455][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 90 seconds
[  215.677909][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 90 seconds
[  215.683018][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 90 seconds
[  215.862658][T15412] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  215.865262][T15412] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  215.867753][T15412] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  215.870446][T15412] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  215.872986][T15412] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  215.876076][T15412] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  215.878893][T15412] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  215.882149][T15412] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  215.885298][T15412] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  215.888401][T15412] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  216.280538][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'.
[  216.302773][T15457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4165'.
[  218.053198][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4206'.
[  218.117904][T15552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4209'.
[  218.122626][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'.
[  218.233629][T15553] block nbd2: not configured, cannot reconfigure
[  218.264796][T15561] lo speed is unknown, defaulting to 1000
[  218.465609][T15573] syzkaller1: entered promiscuous mode
[  218.474733][T15573] syzkaller1: entered allmulticast mode
[  218.504636][T15576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4219'.
[  218.656573][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4223'.
[  218.793005][T15589] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  218.810915][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4226'.
[  218.868630][T15592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4227'.
[  219.687316][T15669] netlink: 'syz.0.4262': attribute type 2 has an invalid length.
[  219.693081][T15669] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4262'.
[  219.793254][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4267'.
[  220.187753][T15680] syz.1.4268 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  220.192982][T15680] CPU: 1 UID: 0 PID: 15680 Comm: syz.1.4268 Not tainted syzkaller #0 PREEMPT(full) 
[  220.193000][T15680] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  220.193008][T15680] Call Trace:
[  220.193043][T15680]  <TASK>
[  220.193049][T15680]  dump_stack_lvl+0xe8/0x150
[  220.193070][T15680]  dump_header+0xd3/0x4c0
[  220.193087][T15680]  oom_kill_process+0x3ab/0x970
[  220.193103][T15680]  out_of_memory+0x106c/0x1410
[  220.193114][T15680]  ? percpu_ref_put+0x19/0x180
[  220.193129][T15680]  ? __pfx___mutex_lock+0x10/0x10
[  220.193155][T15680]  ? __pfx_out_of_memory+0x10/0x10
[  220.193167][T15680]  ? do_raw_spin_unlock+0x4d/0x210
[  220.193188][T15680]  try_charge_memcg+0xc53/0x1560
[  220.193204][T15680]  ? __lock_acquire+0x6b5/0x2cf0
[  220.193229][T15680]  ? __pfx_try_charge_memcg+0x10/0x10
[  220.193242][T15680]  ? xa_load+0x60/0x210
[  220.193262][T15680]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  220.193279][T15680]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  220.193297][T15680]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  220.193313][T15680]  __swap_cache_prepare_and_add+0x52a/0x700
[  220.193344][T15680]  swap_cache_alloc_folio+0xf1/0x240
[  220.193363][T15680]  swap_cluster_readahead+0x369/0x690
[  220.193384][T15680]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  220.193410][T15680]  ? get_vma_policy+0x27b/0x3c0
[  220.193427][T15680]  swapin_readahead+0x196/0xc50
[  220.193453][T15680]  ? __pfx_swapin_readahead+0x10/0x10
[  220.193471][T15680]  ? swap_table_get+0x1e/0x260
[  220.193486][T15680]  ? swap_table_get+0x1e/0x260
[  220.193500][T15680]  ? swap_table_get+0x1e/0x260
[  220.193515][T15680]  ? swap_table_get+0x216/0x260
[  220.193532][T15680]  ? swap_cache_get_folio+0x513/0x520
[  220.193552][T15680]  do_swap_page+0x54f/0x58d0
[  220.193568][T15680]  ? __lock_acquire+0x6b5/0x2cf0
[  220.193596][T15680]  ? do_swap_page+0x12c/0x58d0
[  220.193610][T15680]  ? __pfx_do_swap_page+0x10/0x10
[  220.193625][T15680]  ? __pte_offset_map+0x1ae/0x240
[  220.193643][T15680]  ? pte_offset_map_rw_nolock+0xea/0x160
[  220.193662][T15680]  handle_mm_fault+0x12d2/0x3310
[  220.193689][T15680]  ? handle_mm_fault+0xee/0x3310
[  220.193711][T15680]  ? __pfx_handle_mm_fault+0x10/0x10
[  220.193726][T15680]  ? lock_vma_under_rcu+0x45a/0x500
[  220.193756][T15680]  do_user_addr_fault+0xa73/0x1340
[  220.193777][T15680]  ? rcu_is_watching+0x15/0xb0
[  220.193794][T15680]  ? trace_page_fault_user+0x84/0x210
[  220.193811][T15680]  exc_page_fault+0x6a/0xc0
[  220.193829][T15680]  asm_exc_page_fault+0x26/0x30
[  220.193841][T15680] RIP: 0033:0x7f49db35cfa0
[  220.193854][T15680] Code: 6f 46 50 0f 29 44 24 50 f3 0f 6f 46 60 0f 29 44 24 60 f3 0f 6f 46 70 0f 29 44 24 70 e9 5d ff ff ff e8 04 1d 04 00 0f 1f 40 00 <8b> 07 f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89
[  220.193864][T15680] RSP: 002b:00007ffe271cc858 EFLAGS: 00010246
[  220.193876][T15680] RAX: 0000000000000000 RBX: 000055555a47e500 RCX: 0000000000000000
[  220.193883][T15680] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: 000055555a47e808
[  220.193890][T15680] RBP: 00007f49db617da0 R08: 00007ffe271cc8b0 R09: 0000000000000000
[  220.193897][T15680] R10: 0000000000000000 R11: 000055555a47e808 R12: 0000000000035d5b
[  220.193905][T15680] R13: 00007f49db615fac R14: 0000000000035a4d R15: 00007ffe271cc9e0
[  220.193925][T15680]  </TASK>
[  220.193929][T15680] memory: usage 307200kB, limit 307200kB, failcnt 729
[  220.330320][T15680] memory+swap: usage 307292kB, limit 9007199254740988kB, failcnt 0
[  220.335043][T15680] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0
[  220.338044][T15680] Memory cgroup stats for /syz1:
[  220.338127][T15680] cache 0
[  220.341521][T15680] rss 0
[  220.342699][T15680] rss_huge 0
[  220.344236][T15680] shmem 0
[  220.345519][T15680] mapped_file 0
[  220.347987][T15680] dirty 0
[  220.349745][T15680] writeback 0
[  220.351446][T15680] workingset_refault_anon 16
[  220.353305][T15680] workingset_refault_file 64
[  220.355064][T15680] swap 94208
[  220.356127][T15680] swapcached 151552
[  220.357347][T15680] pgpgin 119420
[  220.358704][T15680] pgpgout 119416
[  220.360397][T15680] pgfault 259963
[  220.361908][T15680] pgmajfault 18
[  220.363399][T15680] inactive_anon 4096
[  220.364990][T15680] active_anon 12288
[  220.366579][T15680] inactive_file 0
[  220.368119][T15680] active_file 0
[  220.369703][T15680] unevictable 0
[  220.371188][T15680] hierarchical_memory_limit 314572800
[  220.373422][T15680] hierarchical_memsw_limit 9223372036854771712
[  220.375984][T15680] total_cache 0
[  220.377460][T15680] total_rss 0
[  220.378845][T15680] total_rss_huge 0
[  220.380545][T15680] total_shmem 0
[  220.381941][T15680] total_mapped_file 0
[  220.383571][T15680] total_dirty 0
[  220.384978][T15680] total_writeback 0
[  220.386749][T15680] total_workingset_refault_anon 16
[  220.388867][T15680] total_workingset_refault_file 64
[  220.391415][T15680] total_swap 94208
[  220.393045][T15680] total_swapcached 151552
[  220.394849][T15680] total_pgpgin 119420
[  220.396518][T15680] total_pgpgout 119416
[  220.398211][T15680] total_pgfault 259970
[  220.400157][T15680] total_pgmajfault 18
[  220.401930][T15680] total_inactive_anon 4096
[  220.403933][T15680] total_active_anon 12288
[  220.405823][T15680] total_inactive_file 0
[  220.407632][T15680] total_active_file 0
[  220.409816][T15680] total_unevictable 0
[  220.411582][T15680] anon_cost 0
[  220.414071][T15680] file_cost 0
[  220.415631][T15680] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.4268,pid=15680,uid=0
[  220.422243][T15680] Memory cgroup out of memory: Killed process 15680 (syz.1.4268) total-vm:102152kB, anon-rss:1244kB, file-rss:21580kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000
[  221.491248][T15779] lo speed is unknown, defaulting to 1000
[  221.820881][T15809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4326'.
[  222.256532][T15835] netlink: 'syz.0.4338': attribute type 10 has an invalid length.
[  222.612682][T15851] syzkaller1: entered promiscuous mode
[  222.615095][T15851] syzkaller1: entered allmulticast mode
[  222.951492][T15876] netlink: 'syz.0.4358': attribute type 6 has an invalid length.
[  223.178152][T15899] tipc: New replicast peer: 255.255.255.255
[  223.185451][T15899] tipc: Enabled bearer <udp:syz2>, priority 10
[  223.188716][T15899] __nla_validate_parse: 4 callbacks suppressed
[  223.188726][T15899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4369'.
[  223.471669][T15925] netlink: 'syz.0.4381': attribute type 1 has an invalid length.
[  223.552176][T15933] netlink: 'syz.0.4385': attribute type 10 has an invalid length.
[  224.073744][T15986] IPv6: NLM_F_CREATE should be specified when creating new route
[  224.233581][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4418'.
[  224.407550][T16023] netlink: 'syz.1.4429': attribute type 29 has an invalid length.
[  224.412798][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4429'.
[  224.453971][T16032] netlink: 'syz.2.4434': attribute type 10 has an invalid length.
[  224.656453][T16052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4442'.
[  224.719700][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 99 seconds
[  224.723202][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 99 seconds
[  224.726655][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 99 seconds
[  224.730763][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 99 seconds
[  224.785976][T16068] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.4448'.
[  224.842074][T16078] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4453'.
[  224.997569][T16096] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4462'.
[  225.001462][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4462'.
[  225.221717][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4472'.
[  225.224869][T16119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4472'.
[  225.227907][T16119] netlink: 'syz.1.4472': attribute type 11 has an invalid length.
[  225.239915][ T5875] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  225.240049][T16119] netlink: 'syz.1.4472': attribute type 11 has an invalid length.
[  225.243263][ T5875] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  225.249578][ T5875] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  225.254282][ T5875] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  225.640770][T16157] netlink: 'syz.0.4489': attribute type 2 has an invalid length.
[  225.647766][T16157] : entered promiscuous mode
[  226.265769][ T5813] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0
[  226.283425][ T5813] CPU: 1 UID: 0 PID: 5813 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  226.283440][ T5813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  226.283444][ T5813] Call Trace:
[  226.283448][ T5813]  <TASK>
[  226.283452][ T5813]  dump_stack_lvl+0xe8/0x150
[  226.283466][ T5813]  dump_header+0xd3/0x4c0
[  226.283476][ T5813]  oom_kill_process+0x3ab/0x970
[  226.283486][ T5813]  out_of_memory+0x106c/0x1410
[  226.283493][ T5813]  ? percpu_ref_put+0x19/0x180
[  226.283502][ T5813]  ? __pfx___mutex_lock+0x10/0x10
[  226.283512][ T5813]  ? __pfx_out_of_memory+0x10/0x10
[  226.283518][ T5813]  ? do_raw_spin_unlock+0x4d/0x210
[  226.283529][ T5813]  try_charge_memcg+0xc53/0x1560
[  226.283537][ T5813]  ? __lock_acquire+0x6b5/0x2cf0
[  226.283551][ T5813]  ? __pfx_try_charge_memcg+0x10/0x10
[  226.283563][ T5813]  ? xa_load+0x60/0x210
[  226.283574][ T5813]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  226.283583][ T5813]  ? mem_cgroup_swapin_charge_folio+0x36/0x4d0
[  226.283592][ T5813]  mem_cgroup_swapin_charge_folio+0x2e3/0x4d0
[  226.283601][ T5813]  __swap_cache_prepare_and_add+0x52a/0x700
[  226.283617][ T5813]  swap_cache_alloc_folio+0xf1/0x240
[  226.283628][ T5813]  swap_cluster_readahead+0x369/0x690
[  226.283641][ T5813]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  226.283655][ T5813]  ? get_vma_policy+0x27b/0x3c0
[  226.283664][ T5813]  swapin_readahead+0x196/0xc50
[  226.283678][ T5813]  ? __pfx_swapin_readahead+0x10/0x10
[  226.283688][ T5813]  ? swap_table_get+0x1e/0x260
[  226.283697][ T5813]  ? swap_table_get+0x1e/0x260
[  226.283704][ T5813]  ? swap_table_get+0x1e/0x260
[  226.283713][ T5813]  ? swap_table_get+0x216/0x260
[  226.283723][ T5813]  ? swap_cache_get_folio+0x513/0x520
[  226.283734][ T5813]  do_swap_page+0x54f/0x58d0
[  226.283744][ T5813]  ? __lock_acquire+0x6b5/0x2cf0
[  226.283759][ T5813]  ? do_swap_page+0x12c/0x58d0
[  226.283767][ T5813]  ? __pfx_do_swap_page+0x10/0x10
[  226.283776][ T5813]  ? __pte_offset_map+0x1ae/0x240
[  226.283787][ T5813]  ? pte_offset_map_rw_nolock+0xea/0x160
[  226.283798][ T5813]  handle_mm_fault+0x12d2/0x3310
[  226.283812][ T5813]  ? handle_mm_fault+0xee/0x3310
[  226.283824][ T5813]  ? __pfx_handle_mm_fault+0x10/0x10
[  226.283833][ T5813]  ? lock_vma_under_rcu+0x45a/0x500
[  226.283849][ T5813]  do_user_addr_fault+0xa73/0x1340
[  226.283860][ T5813]  ? rcu_is_watching+0x15/0xb0
[  226.283870][ T5813]  ? trace_page_fault_user+0x84/0x210
[  226.283880][ T5813]  exc_page_fault+0x6a/0xc0
[  226.283891][ T5813]  asm_exc_page_fault+0x26/0x30
[  226.283897][ T5813] RIP: 0033:0x7f0f1375cfce
[  226.283906][ T5813] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  226.283911][ T5813] RSP: 002b:00007ffd451c3f58 EFLAGS: 00010246
[  226.283919][ T5813] RAX: 0000000000000000 RBX: 000055558db42500 RCX: 00007f0f1375cfce
[  226.283924][ T5813] RDX: 00007ffd451c3fb0 RSI: 0000000000000000 RDI: 0000000000000000
[  226.283928][ T5813] RBP: 00007ffd451c401c R08: 0000000000000000 R09: 0000000000000000
[  226.283932][ T5813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388
[  226.283936][ T5813] R13: 00000000000927c0 R14: 00000000000371b7 R15: 00007ffd451c4070
[  226.283947][ T5813]  </TASK>
[  226.283950][ T5813] memory: usage 307200kB, limit 307200kB, failcnt 354
[  226.420576][ T5813] memory+swap: usage 307396kB, limit 9007199254740988kB, failcnt 0
[  226.444247][ T5813] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0
[  226.466053][ T5813] Memory cgroup stats for /syz0:
[  226.466145][ T5813] cache 0
[  226.490269][ T5813] rss 0
[  226.491235][ T5813] rss_huge 0
[  226.492313][ T5813] shmem 0
[  226.493276][ T5813] mapped_file 0
[  226.494401][ T5813] dirty 0
[  226.495368][ T5813] writeback 0
[  226.496454][ T5813] workingset_refault_anon 0
[  226.497902][ T5813] workingset_refault_file 0
[  226.529108][ T5813] swap 200704
[  226.530247][ T5813] swapcached 212992
[  226.531542][ T5813] pgpgin 120389
[  226.532712][ T5813] pgpgout 120386
[  226.533898][ T5813] pgfault 268661
[  226.535101][ T5813] pgmajfault 5
[  226.536213][ T5813] inactive_anon 0
[  226.537405][ T5813] active_anon 12288
[  226.538645][ T5813] inactive_file 0
[  226.572534][ T5813] active_file 0
[  226.574108][ T5813] unevictable 0
[  226.575361][ T5813] hierarchical_memory_limit 314572800
[  226.577103][ T5813] hierarchical_memsw_limit 9223372036854771712
[  226.580241][ T5813] total_cache 0
[  226.581403][ T5813] total_rss 0
[  226.582489][ T5813] total_rss_huge 0
[  226.583695][ T5813] total_shmem 0
[  226.584835][ T5813] total_mapped_file 0
[  226.586140][ T5813] total_dirty 0
[  226.587280][ T5813] total_writeback 0
[  226.588531][ T5813] total_workingset_refault_anon 0
[  226.590725][ T5813] total_workingset_refault_file 0
[  226.592876][ T5813] total_swap 200704
[  226.594139][ T5813] total_swapcached 212992
[  226.595581][ T5813] total_pgpgin 120389
[  226.596865][ T5813] total_pgpgout 120386
[  226.598205][ T5813] total_pgfault 268661
[  226.600009][ T5813] total_pgmajfault 5
[  226.601341][ T5813] total_inactive_anon 0
[  226.602738][ T5813] total_active_anon 12288
[  226.604211][ T5813] total_inactive_file 0
[  226.605606][ T5813] total_active_file 0
[  226.607268][ T5813] total_unevictable 0
[  226.608901][ T5813] anon_cost 0
[  226.632022][ T5813] file_cost 0
[  226.633504][ T5813] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.4492,pid=16164,uid=0
[  226.642458][ T5813] Memory cgroup out of memory: Killed process 16164 (syz.0.4492) total-vm:104464kB, anon-rss:1256kB, file-rss:23128kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  227.027173][T16207] net_ratelimit: 44 callbacks suppressed
[  227.027185][T16207] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  227.420386][T16233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.426607][T16233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.522619][T16233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.526905][T16233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.596516][T16233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.601285][T16233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.691659][T16233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  227.699100][T16233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.825107][T16249] lo speed is unknown, defaulting to 1000
[  227.844530][ T5841] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  227.847950][ T5841] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.873720][ T5841] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  227.876942][ T5841] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.905215][ T5841] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  227.911314][ T5841] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.932226][ T5841] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  227.935477][ T5841] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  228.137411][T16259] lo speed is unknown, defaulting to 1000
[  228.308339][T16278] bond2: entered promiscuous mode
[  228.310917][T16278] 8021q: adding VLAN 0 to HW filter on device bond2
[  228.408045][T16281] 8021q: adding VLAN 0 to HW filter on device bond3
[  228.425620][T16281] bond3: entered promiscuous mode
[  228.428421][T16281] bond2: (slave bond3): Enslaving as an active interface with an up link
[  228.560692][T16296] __nla_validate_parse: 8 callbacks suppressed
[  228.560701][T16296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4544'.
[  228.574467][T16296] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  228.587901][T16296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4544'.
[  228.624415][T16301] ip6tnl3: entered promiscuous mode
[  228.999866][T16326] netlink: 'syz.0.4559': attribute type 13 has an invalid length.
[  229.002578][T16326] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.4559'.
[  230.287159][T16371] ip6tnl4: entered promiscuous mode
[  230.294799][T16371] ip6tnl4: entered allmulticast mode
[  230.369241][T16385] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4586'.
[  230.556293][T16409] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4597'.
[  232.197686][T16435] syzkaller1: entered promiscuous mode
[  232.200191][T16435] syzkaller1: entered allmulticast mode
[  233.363218][T16458] syzkaller0: entered promiscuous mode
[  233.365151][T16458] syzkaller0: entered allmulticast mode
[  233.644416][T16415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  233.754314][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 108 seconds
[  233.758988][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 108 seconds
[  233.764534][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 108 seconds
[  233.770311][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 108 seconds
[  233.824755][T16470] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4621'.
[  233.827845][T16470] netlink: 'syz.2.4621': attribute type 9 has an invalid length.
[  233.832358][T16470] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4621'.
[  233.835487][T16470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4621'.
[  235.408019][T16508] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.4636'.
[  235.532889][T16514] lo speed is unknown, defaulting to 1000
[  235.561526][T16521] bpq0: entered allmulticast mode
[  235.566170][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4642'.
[  236.013705][T16556] netlink: 'syz.2.4657': attribute type 1 has an invalid length.
[  236.017989][T16555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4656'.
[  236.291577][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4666'.
[  236.390709][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4670'.
[  236.692456][T16611] ip6tnl0: Caught tx_queue_len zero misconfig
[  238.216328][T16696] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4715'.
[  238.333437][T16709] syzkaller0: entered promiscuous mode
[  238.335377][T16709] syzkaller0: entered allmulticast mode
[  238.365968][T16711] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0
[  238.675216][T16732] xt_TCPMSS: Only works on TCP SYN packets
[  239.598991][T16790] netlink: 'syz.1.4752': attribute type 13 has an invalid length.
[  239.834225][T16811] geneve1: entered promiscuous mode
[  240.418613][T16868] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.423531][T16868] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.437546][T16871] netlink: 'syz.1.4789': attribute type 1 has an invalid length.
[  240.458015][T16868] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.464255][T16868] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.514317][T16868] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.519585][T16868] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.575637][T16868] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  240.580318][T16868] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.684771][ T5825] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  240.687425][ T5825] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.708757][ T5825] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  240.715208][ T5825] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.733211][ T5825] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  240.744840][ T5825] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.756567][ T5825] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  240.762223][ T5825] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.813576][T16893] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4800'.
[  240.861630][T16898] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  240.922720][T16907] syzkaller0: entered promiscuous mode
[  240.925107][T16907] syzkaller0: entered allmulticast mode
[  240.953192][T16913] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4810'.
[  241.304018][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4820'.
[  241.308697][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4820'.
[  241.314529][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4820'.
[  241.321519][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4820'.
[  241.325080][T16944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4820'.
[  241.350515][T16944] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  241.789174][T16955] lo speed is unknown, defaulting to 1000
[  242.333436][T16992] netlink: 'syz.2.4839': attribute type 30 has an invalid length.
[  242.789946][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 117 seconds
[  242.794368][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 117 seconds
[  242.798859][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 117 seconds
[  242.804201][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 117 seconds
[  243.796948][T17034] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4860'.
[  243.815103][T17034] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4860'.
[  243.875766][T17043] netlink: 'syz.0.4864': attribute type 61 has an invalid length.
[  243.879958][T17043] netlink: 'syz.0.4864': attribute type 62 has an invalid length.
[  243.911102][T17038] macvtap3: entered promiscuous mode
[  243.919767][T17038] macvtap3: entered allmulticast mode
[  245.187901][T17101] bridge5: entered promiscuous mode
[  245.190981][T17101] bridge5: entered allmulticast mode
[  245.204351][T17109] lo speed is unknown, defaulting to 1000
[  245.564654][T17133] lo speed is unknown, defaulting to 1000
[  245.758947][T17148] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4911'.
[  246.022752][T17161] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.4917'.
[  246.087129][T17165] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4920'.
[  246.445049][T17194] sctp: [Deprecated]: syz.2.4933 (pid 17194) Use of int in maxseg socket option.
[  246.445049][T17194] Use struct sctp_assoc_value instead
[  246.496631][T17198] syzkaller0: entered promiscuous mode
[  246.498555][T17198] syzkaller0: entered allmulticast mode
[  246.991995][T17227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4944'.
[  247.010068][T17227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4944'.
[  247.074243][T17235] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4952'.
[  247.106365][T17239] netlink: 'syz.0.4953': attribute type 2 has an invalid length.
[  247.512613][T17286] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4975'.
[  247.621473][T17296] syzkaller0: entered promiscuous mode
[  247.623868][T17296] syzkaller0: entered allmulticast mode
[  248.067210][T17333] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) !
[  248.071696][T17333] syzkaller0: entered promiscuous mode
[  248.073777][T17333] syzkaller0: entered allmulticast mode
[  248.916676][T17349] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5002'.
[  248.921988][T17349] netlink: 'syz.0.5002': attribute type 1 has an invalid length.
[  248.924613][T17349] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5002'.
[  248.960572][T17353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5004'.
[  249.228363][T17377] sit2: entered promiscuous mode
[  249.364104][T17391] netlink: 'syz.1.5022': attribute type 96 has an invalid length.
[  249.394916][T17395] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5024'.
[  249.537407][T17402] lo: Caught tx_queue_len zero misconfig
[  249.595134][T17406] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  249.623684][T17408] netlink: 'syz.1.5030': attribute type 1 has an invalid length.
[  249.754483][T17419] batadv1: entered promiscuous mode
[  249.756692][T17419] batadv1: entered allmulticast mode
[  249.978005][T17431] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  249.983191][T17431] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  251.044713][T17455] lo speed is unknown, defaulting to 1000
[  251.075392][T17463] __nla_validate_parse: 2 callbacks suppressed
[  251.075412][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5051'.
[  251.089116][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5051'.
[  251.140352][T17463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  251.710211][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5072'.
[  251.829481][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 126 seconds
[  251.833083][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 126 seconds
[  251.837026][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 126 seconds
[  251.841572][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 126 seconds
[  251.848457][T17509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5075'.
[  251.899871][T17513] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5077'.
[  252.524878][T17533] xt_hashlimit: size too large, truncated to 1048576
[  252.576503][T17535] x9: renamed from bridge_slave_0 (while UP)
[  255.121300][T17525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  255.262508][T17577] netlink: 'syz.0.5103': attribute type 21 has an invalid length.
[  255.368284][T17584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5108'.
[  255.379097][T17584] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5108'.
[  255.548467][T17612] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5120'.
[  255.583540][T17614] ip6tnl5: entered allmulticast mode
[  255.703911][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5130'.
[  256.326137][T17689] ip6tnl0: Caught tx_queue_len zero misconfig
[  256.411342][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5147'.
[  256.431728][T17695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  256.434406][T17695] IPv6: NLM_F_CREATE should be set when creating new route
[  256.442837][T17695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  256.445664][T17695] IPv6: NLM_F_CREATE should be set when creating new route
[  256.477448][T17703] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.485228][T17703] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.547201][T17703] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.550756][T17703] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.603054][T17703] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.606323][T17703] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.665163][T17703] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  256.668275][T17703] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.737210][ T5841] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  256.746212][ T5841] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.772495][ T5825] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  256.775715][ T5825] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.789566][ T5825] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  256.793708][ T5825] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.806320][ T5825] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  256.820445][ T5825] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.861516][T17716] xt_TCPMSS: Only works on TCP SYN packets
[  256.947737][T17722] vlan4: entered promiscuous mode
[  256.950379][T17722] bond0: entered promiscuous mode
[  257.173023][T17737] SET target dimension over the limit!
[  257.207331][T17741] netlink: 'syz.0.5167': attribute type 6 has an invalid length.
[  257.215152][T17741] netlink: 'syz.0.5167': attribute type 7 has an invalid length.
[  257.218366][T17741] netlink: 'syz.0.5167': attribute type 8 has an invalid length.
[  257.447249][T17768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5180'.
[  257.517647][T17776] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5184'.
[  258.125011][T17817] netlink: 'syz.0.5200': attribute type 7 has an invalid length.
[  258.144372][T17819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5202'.
[  258.272416][T17833] netlink: 'syz.2.5208': attribute type 10 has an invalid length.
[  259.618095][T17871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5224'.
[  259.622547][T17871] netem: incorrect ge model size
[  259.624983][T17871] netem: change failed
[  259.749637][T17885] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  259.900155][T17908] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5242'.
[  259.936176][T17915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5246'.
[  259.973862][T17915] 8021q: adding VLAN 0 to HW filter on device bond6
[  259.986514][T17916] erspan1: entered promiscuous mode
[  259.988717][T17916] erspan1: entered allmulticast mode
[  259.997443][T17915] ipvlan0: entered promiscuous mode
[  260.000992][T17915] ipvlan0: entered allmulticast mode
[  260.009263][T17915] bond6: entered allmulticast mode
[  260.011089][T17915] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up
[  260.104946][T17937] sock: sock_timestamping_bind_phc: sock not bind to device
[  260.172546][T17947] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0
[  260.216243][T17952] syzkaller0: entered promiscuous mode
[  260.225710][T17952] syzkaller0: entered allmulticast mode
[  260.869620][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 135 seconds
[  260.873968][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 135 seconds
[  260.878520][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 135 seconds
[  260.883108][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 135 seconds
[  260.952461][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  260.955079][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  261.260529][T17977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5274'.
[  261.318188][T17981] netlink: 'syz.2.5277': attribute type 1 has an invalid length.
[  261.581055][T18005] netlink: 'syz.2.5287': attribute type 21 has an invalid length.
[  261.584347][T18005] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5287'.
[  261.587962][T18005] netlink: 'syz.2.5287': attribute type 5 has an invalid length.
[  261.594630][T18005] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5287'.
[  261.766632][T18021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5295'.
[  261.923803][T18032] netlink: 'syz.2.5300': attribute type 3 has an invalid length.
[  261.927006][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5300'.
[  262.968410][T18098] netlink: 'syz.2.5329': attribute type 1 has an invalid length.
[  263.005819][T18102] mac80211_hwsim hwsim7 wlan1: Caught tx_queue_len zero misconfig
[  263.038910][T18109] bond0: Caught tx_queue_len zero misconfig
[  263.173282][T18127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5341'.
[  263.287157][T18136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5345'.
[  263.292467][T18136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5345'.
[  263.381037][T18150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5353'.
[  263.645696][T18188] veth1_macvtap: left promiscuous mode
[  263.647832][T18188] macsec0: entered promiscuous mode
[  263.653206][T18188] veth1_macvtap: entered promiscuous mode
[  263.656438][T18188] macsec0: left promiscuous mode
[  264.335401][T18195] gretap0: entered promiscuous mode
[  264.470728][T18201] syzkaller0: entered promiscuous mode
[  264.473134][T18201] syzkaller0: entered allmulticast mode
[  264.609425][T18207] netlink: 136 bytes leftover after parsing attributes in process `syz.0.5379'.
[  264.613287][T18209] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5380'.
[  265.393969][T18266] af_packet: tpacket_rcv: packet too big, clamped from 3390 to 4294967272. macoff=96
[  265.950860][T18303] openvswitch: netlink: Missing valid actions attribute.
[  265.953805][T18303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  266.274977][T18318] netlink: 'syz.1.5433': attribute type 5 has an invalid length.
[  266.422693][T18326] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  266.426951][T18326] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  266.566816][T18331] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  266.920091][T18346] lo speed is unknown, defaulting to 1000
[  267.876352][T18378] netlink: 'syz.0.5458': attribute type 1 has an invalid length.
[  267.886480][T18378] __nla_validate_parse: 1 callbacks suppressed
[  267.886498][T18378] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5458'.
[  268.550704][T18386] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  268.553090][T18386] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  268.616820][T18386] bond1: left promiscuous mode
[  268.646005][T18386] bond2: left promiscuous mode
[  268.648092][T18386] bond3: left promiscuous mode
[  268.680964][T18386] gretap1: left promiscuous mode
[  268.705399][T18386] macvlan2: left promiscuous mode
[  268.707697][T18386] macvlan2: left allmulticast mode
[  268.734097][T18386] macsec0: left promiscuous mode
[  268.789411][T18386] hsr1: left promiscuous mode
[  268.891096][T18386] batman_adv: batadv0: Interface deactivated: gretap2
[  268.920646][T18386] ip6tnl3: left promiscuous mode
[  268.922744][T18386] ip6tnl4: left promiscuous mode
[  268.924591][T18386] ip6tnl4: left allmulticast mode
[  268.934837][T18386] ip6tnl5: left allmulticast mode
[  268.937818][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5468'.
[  268.941974][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5468'.
[  268.946069][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5468'.
[  268.956457][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5468'.
[  268.969189][   T24] syz1: Port: 1 Link DOWN
[  268.970970][ T5825] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.974213][ T5825] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  268.977749][ T5825] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  269.063232][T18427] syzkaller1: entered promiscuous mode
[  269.065120][T18427] syzkaller1: entered allmulticast mode
[  269.097928][T18429] netlink: 7920 bytes leftover after parsing attributes in process `syz.1.5475'.
[  269.484222][T18468] netlink: 332 bytes leftover after parsing attributes in process `syz.1.5492'.
[  269.487259][T18468] netlink: 'syz.1.5492': attribute type 9 has an invalid length.
[  269.491238][T18468] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5492'.
[  269.498289][T18468] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5492'.
[  269.911573][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 144 seconds
[  269.915880][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 144 seconds
[  269.920557][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 144 seconds
[  269.925497][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 144 seconds
[  270.228768][T18529] netlink: 'syz.1.5522': attribute type 5 has an invalid length.
[  270.738245][T18557] lo speed is unknown, defaulting to 1000
[  270.839904][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5539'.
[  271.070926][T18581] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  271.205687][T18588] netlink: 'syz.2.5549': attribute type 13 has an invalid length.
[  271.617496][T18601] netlink: 'syz.2.5555': attribute type 6 has an invalid length.
[  271.950776][T18620] sctp: [Deprecated]: syz.0.5564 (pid 18620) Use of int in max_burst socket option.
[  271.950776][T18620] Use struct sctp_assoc_value instead
[  272.543360][T18678] netlink: zone id is out of range
[  272.826896][T18709] mac80211_hwsim hwsim5 wlan1: Caught tx_queue_len zero misconfig
[  272.854620][T18707] bridge6: entered promiscuous mode
[  273.013818][T18727] netlink: 'syz.2.5603': attribute type 1 has an invalid length.
[  273.017300][T18727] __nla_validate_parse: 3 callbacks suppressed
[  273.017313][T18727] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5603'.
[  273.254677][T18755] batadv_slave_0: Caught tx_queue_len zero misconfig
[  273.321949][T18759] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5620'.
[  273.383531][T18765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5623'.
[  273.438158][T18768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5625'.
[  273.842988][T18816] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0
[  274.307097][T18869] syzkaller0: entered promiscuous mode
[  274.312808][T18869] syzkaller0: entered allmulticast mode
[  274.405576][T18878] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5672'.
[  274.502116][T18891] ip6gretap1: entered allmulticast mode
[  274.682102][T18909] bond7: option mode: invalid value (254)
[  274.686450][T18909] bond7 (unregistering): Released all slaves
[  274.843360][T18932] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5698'.
[  275.017532][T18951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5704'.
[  275.225570][T18959] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  275.265663][T18961] netlink: 'syz.2.5708': attribute type 5 has an invalid length.
[  275.695240][T18976] lo speed is unknown, defaulting to 1000
[  276.827441][T19008] pimreg3: entered allmulticast mode
[  277.056434][T19029] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5738'.
[  277.136057][T19034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5740'.
[  277.301835][T19048] sch_tbf: burst 2 is lower than device tunl0 mtu (1280) !
[  277.503091][T19070] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5758'.
[  277.943992][T19112] netlink: 'syz.1.5776': attribute type 15 has an invalid length.
[  278.483162][T19158] macsec1: entered allmulticast mode
[  278.485484][T19158] syz_tun: entered allmulticast mode
[  278.499308][T19158] syz_tun: left allmulticast mode
[  278.598593][T19171] __nla_validate_parse: 5 callbacks suppressed
[  278.598608][T19171] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5803'.
[  278.714451][T19187] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5810'.
[  278.786448][T19194] xt_hashlimit: max too large, truncated to 1048576
[  278.898538][T19200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5816'.
[  278.929216][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5816'.
[  278.953149][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 153 seconds
[  278.957447][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 153 seconds
[  278.965428][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 153 seconds
[  278.970226][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 153 seconds
[  279.945574][T19237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5828'.
[  280.304602][T19249] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  280.312777][T19249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5831'.
[  280.555735][T19256] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  280.564138][T19256] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  280.786485][T19259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5834'.
[  281.155677][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5839'.
[  281.207605][T19286] syzkaller1: entered promiscuous mode
[  281.211492][T19286] syzkaller1: entered allmulticast mode
[  281.284622][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5843'.
[  281.612547][T19321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5851'.
[  281.642973][T19327] netlink: 'syz.2.5852': attribute type 2 has an invalid length.
[  281.642972][T19326] netlink: 'syz.2.5852': attribute type 2 has an invalid length.
[  281.648996][T19326] openvswitch: netlink: VXLAN extension message has 196 unknown bytes.
[  284.406096][T19304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  284.671290][T19361] syzkaller0: entered promiscuous mode
[  284.674505][T19361] syzkaller0: entered allmulticast mode
[  284.812156][T19374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5868'.
[  284.836168][T19374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5868'.
[  284.904839][T19381] ip6gretap0: entered promiscuous mode
[  285.002035][T19389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5875'.
[  285.005027][T19389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5875'.
[  285.007859][T19389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5875'.
[  285.142696][T19398] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5878'.
[  285.151876][T19398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5878'.
[  285.415979][T19418] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5885'.
[  285.426652][T19419] 8021q: VLANs not supported on gre0
[  285.492710][T19419] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5887'.
[  285.512770][T19431] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  285.651010][T19439] netlink: 'syz.2.5890': attribute type 1 has an invalid length.
[  285.874465][T19461] netlink: 'syz.2.5896': attribute type 10 has an invalid length.
[  285.903506][T19461] 8021q: adding VLAN 0 to HW filter on device batadv0
[  285.907447][T19461] batadv0: entered promiscuous mode
[  285.911341][T19461] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  286.644719][T19465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5898'.
[  287.132961][T19530] lo: entered promiscuous mode
[  287.141920][T19530] tunl0: entered promiscuous mode
[  287.146130][T19530] gre0: entered promiscuous mode
[  287.150046][T19530] gretap0: entered promiscuous mode
[  287.153396][T19530] erspan0: entered promiscuous mode
[  287.157575][T19530] ip_vti0: entered promiscuous mode
[  287.160739][T19530] ip6_vti0: entered promiscuous mode
[  287.163736][T19530] sit0: entered promiscuous mode
[  287.166414][T19530] ip6tnl0: entered promiscuous mode
[  287.172671][T19530] ip6gre0: entered promiscuous mode
[  287.178920][T19530] syz_tun: entered promiscuous mode
[  287.192572][T19530] vcan0: entered promiscuous mode
[  287.198984][T19530] bond0: entered promiscuous mode
[  287.206664][T19530] bond_slave_0: entered promiscuous mode
[  287.211394][T19530] bond_slave_1: entered promiscuous mode
[  287.214064][T19530] dummy0: entered promiscuous mode
[  287.220152][T19530] nlmon0: entered promiscuous mode
[  287.225752][T19530] caif0: entered promiscuous mode
[  287.227976][T19530] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  287.284811][T19531] netlink: 'syz.2.5924': attribute type 1 has an invalid length.
[  287.697807][T19563] netlink: 'syz.2.5937': attribute type 15 has an invalid length.
[  288.019657][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 162 seconds
[  288.023826][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 162 seconds
[  288.028091][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 162 seconds
[  288.033771][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 162 seconds
[  288.037219][   T33] audit: type=1800 audit(1772933208.464:5): pid=19596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5947" name="memory.events" dev="tmpfs" ino=10553 res=0 errno=0
[  288.101484][   T33] audit: type=1804 audit(1772933208.534:6): pid=19602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5947" name="/newroot/2092/memory.events" dev="tmpfs" ino=10553 res=1 errno=0
[  288.714726][T19639] lo speed is unknown, defaulting to 1000
[  289.041456][T19648] pim6reg: entered allmulticast mode
[  289.045738][T19648] pim6reg: left allmulticast mode
[  289.287576][T19668] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  289.293529][T19668] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.352794][T19668] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  289.356039][T19668] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.426030][T19668] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  289.436462][T19668] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.475771][T19676] macsec2: entered allmulticast mode
[  289.478035][T19676] macsec0: entered allmulticast mode
[  289.479694][T19680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.481377][T19676] veth1_macvtap: entered allmulticast mode
[  289.532237][T19668] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  289.535457][T19668] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.586485][T19686] IPVS: stopping backup sync thread 8309 ...
[  289.644297][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  289.647770][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.661948][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  289.665333][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.666317][T19689] netlink: 'syz.1.5980': attribute type 61 has an invalid length.
[  289.672570][T19689] netlink: 'syz.1.5980': attribute type 62 has an invalid length.
[  289.677848][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  289.687422][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.700474][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  289.703867][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.019071][T19711] __nla_validate_parse: 10 callbacks suppressed
[  290.019086][T19711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5987'.
[  291.589154][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[  297.029575][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 171 seconds
[  297.033700][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 171 seconds
[  297.037827][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 171 seconds
[  297.070021][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 171 seconds
[  305.444765][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  305.447990][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  305.451966][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  305.455281][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  305.458024][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  305.499748][T19717] lo speed is unknown, defaulting to 1000
[  305.539216][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  305.543419][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  305.546408][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  305.562315][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  305.567028][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  305.587700][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  305.594271][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  305.598186][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  305.602841][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  305.620083][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  305.639841][T19719] lo speed is unknown, defaulting to 1000
[  305.752367][T19721] lo speed is unknown, defaulting to 1000
[  305.935793][T19717] chnl_net:caif_netlink_parms(): no params data found
[  306.060413][T19717] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.063387][T19717] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.066376][T19717] bridge_slave_0: entered allmulticast mode
[  306.075768][T19717] bridge_slave_0: entered promiscuous mode
[  306.080665][T19717] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.083575][T19717] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.086945][T19717] bridge_slave_1: entered allmulticast mode
[  306.091160][T19717] bridge_slave_1: entered promiscuous mode
[  306.143119][T19717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.151266][T19717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.187413][T19717] team0: Port device team_slave_0 added
[  306.192606][T19717] team0: Port device team_slave_1 added
[  306.256063][T19717] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.258955][T19717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.270118][T19717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.280974][T19717] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.283867][T19717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.294761][T19717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  306.391696][T19717] hsr_slave_0: entered promiscuous mode
[  306.394951][T19717] hsr_slave_1: entered promiscuous mode
[  306.397871][T19717] debugfs: 'hsr0' already exists in 'hsr'
[  306.400958][T19717] Cannot create hsr debugfs directory
[  306.403675][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 180 seconds
[  306.415888][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 180 seconds
[  306.420718][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 180 seconds
[  306.425268][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 180 seconds
[  306.478765][T19719] chnl_net:caif_netlink_parms(): no params data found
[  306.569837][T19721] chnl_net:caif_netlink_parms(): no params data found
[  306.681127][T19719] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.686504][T19719] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.689761][T19719] bridge_slave_0: entered allmulticast mode
[  306.693525][T19719] bridge_slave_0: entered promiscuous mode
[  306.697978][T19719] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.700421][T19719] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.702966][T19719] bridge_slave_1: entered allmulticast mode
[  306.705884][T19719] bridge_slave_1: entered promiscuous mode
[  306.783926][T19719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.787999][T19721] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.791343][T19721] bridge0: port 1(bridge_slave_0) entered disabled state
[  306.794175][T19721] bridge_slave_0: entered allmulticast mode
[  306.796858][T19721] bridge_slave_0: entered promiscuous mode
[  306.801204][T19721] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.804161][T19721] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.807209][T19721] bridge_slave_1: entered allmulticast mode
[  306.811321][T19721] bridge_slave_1: entered promiscuous mode
[  306.818725][T19719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.871194][T19721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  306.877366][T19719] team0: Port device team_slave_0 added
[  306.883273][T19719] team0: Port device team_slave_1 added
[  306.895540][T19721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  306.922148][T19719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  306.924934][T19719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.934669][T19719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  306.962999][T19719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  306.965712][T19719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  306.974764][T19719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.017411][T19721] team0: Port device team_slave_0 added
[  307.024399][T19719] hsr_slave_0: entered promiscuous mode
[  307.027321][T19719] hsr_slave_1: entered promiscuous mode
[  307.032412][T19719] debugfs: 'hsr0' already exists in 'hsr'
[  307.034623][T19719] Cannot create hsr debugfs directory
[  307.038789][T19721] team0: Port device team_slave_1 added
[  307.073229][T19721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  307.075995][T19721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  307.087228][T19721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  307.098231][T19721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  307.101685][T19721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  307.116239][T19721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  307.187338][T19721] hsr_slave_0: entered promiscuous mode
[  307.190989][T19721] hsr_slave_1: entered promiscuous mode
[  307.193899][T19721] debugfs: 'hsr0' already exists in 'hsr'
[  307.196294][T19721] Cannot create hsr debugfs directory
[  307.509372][ T5817] Bluetooth: hci3: command tx timeout
[  307.589399][ T5817] Bluetooth: hci4: command tx timeout
[  307.669329][ T5817] Bluetooth: hci5: command tx timeout
[  309.589648][ T5817] Bluetooth: hci3: command tx timeout
[  309.669298][ T5817] Bluetooth: hci4: command tx timeout
[  309.749303][ T5817] Bluetooth: hci5: command tx timeout
[  310.419102][ T5253] udevd[5253]: worker [9544] /devices/virtual/block/nbd0 timeout; kill it
[  310.423925][ T5253] udevd[5253]: seq 12167 '/devices/virtual/block/nbd0' killed
[  311.669261][ T5817] Bluetooth: hci3: command tx timeout
[  311.749250][ T5817] Bluetooth: hci4: command tx timeout
[  311.829238][ T5817] Bluetooth: hci5: command tx timeout
[  313.749571][ T5817] Bluetooth: hci3: command tx timeout
[  313.829249][ T5817] Bluetooth: hci4: command tx timeout
[  313.909332][ T5817] Bluetooth: hci5: command tx timeout
[  315.439592][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 189 seconds
[  315.443976][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 189 seconds
[  315.448469][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 189 seconds
[  315.453519][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 189 seconds
[  322.394997][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  322.397551][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  324.469517][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 198 seconds
[  324.473796][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 198 seconds
[  324.478305][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 198 seconds
[  324.483467][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 198 seconds
[  333.520139][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 207 seconds
[  333.524600][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 207 seconds
[  333.528921][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 207 seconds
[  333.534073][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 207 seconds
[  342.549824][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 216 seconds
[  342.553430][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 216 seconds
[  342.556954][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 216 seconds
[  342.560885][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 216 seconds
[  350.081992][ T5817] Bluetooth: hci2: command 0x0405 tx timeout
[  351.590688][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 225 seconds
[  351.594886][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 225 seconds
[  351.598454][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 225 seconds
[  351.602968][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 225 seconds
[  360.634736][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 234 seconds
[  360.639397][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 234 seconds
[  360.643571][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 234 seconds
[  360.647649][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 234 seconds
[  366.400538][ T5817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  366.403749][ T5817] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  366.406639][ T5817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  366.410577][ T5817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  366.418773][ T5817] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  366.439873][ T5811] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  366.444569][ T5811] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  366.450278][ T5817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  366.450451][   T55] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  366.459268][ T5817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  366.461534][ T5817] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  366.464508][   T55] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  366.464591][ T5817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  366.472609][ T5817] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  366.486151][   T55] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  366.490586][T19749] lo speed is unknown, defaulting to 1000
[  366.583318][T19751] lo speed is unknown, defaulting to 1000
[  366.666859][T19753] lo speed is unknown, defaulting to 1000
[  366.837642][T19749] chnl_net:caif_netlink_parms(): no params data found
[  366.912474][T19751] chnl_net:caif_netlink_parms(): no params data found
[  366.941234][T19749] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.943611][T19749] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.946000][T19749] bridge_slave_0: entered allmulticast mode
[  366.948777][T19749] bridge_slave_0: entered promiscuous mode
[  366.958019][T19749] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.961090][T19749] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.963473][T19749] bridge_slave_1: entered allmulticast mode
[  366.966169][T19749] bridge_slave_1: entered promiscuous mode
[  367.001564][T19749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.012517][T19749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.045155][T19749] team0: Port device team_slave_0 added
[  367.082230][T19749] team0: Port device team_slave_1 added
[  367.101835][T19751] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.104321][T19751] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.106717][T19751] bridge_slave_0: entered allmulticast mode
[  367.110246][T19751] bridge_slave_0: entered promiscuous mode
[  367.115698][T19751] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.118662][T19751] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.122535][T19751] bridge_slave_1: entered allmulticast mode
[  367.126415][T19751] bridge_slave_1: entered promiscuous mode
[  367.150182][T19749] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.152805][T19749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.162524][T19749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.174984][T19749] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.177176][T19749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.185971][T19749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.196554][T19751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.221810][T19751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.263057][T19749] hsr_slave_0: entered promiscuous mode
[  367.265396][T19749] hsr_slave_1: entered promiscuous mode
[  367.267378][T19749] debugfs: 'hsr0' already exists in 'hsr'
[  367.277395][T19749] Cannot create hsr debugfs directory
[  367.280453][T19751] team0: Port device team_slave_0 added
[  367.284372][T19751] team0: Port device team_slave_1 added
[  367.290015][T19753] chnl_net:caif_netlink_parms(): no params data found
[  367.330807][T19751] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.332919][T19751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.341038][T19751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.357135][T19751] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.359540][T19751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.366909][T19751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.426089][T19753] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.428604][T19753] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.432873][T19753] bridge_slave_0: entered allmulticast mode
[  367.435590][T19753] bridge_slave_0: entered promiscuous mode
[  367.456206][T19753] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.458850][T19753] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.461454][T19753] bridge_slave_1: entered allmulticast mode
[  367.464289][T19753] bridge_slave_1: entered promiscuous mode
[  367.470818][T19751] hsr_slave_0: entered promiscuous mode
[  367.473338][T19751] hsr_slave_1: entered promiscuous mode
[  367.475534][T19751] debugfs: 'hsr0' already exists in 'hsr'
[  367.477331][T19751] Cannot create hsr debugfs directory
[  367.507345][T19753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.522989][T19753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.563352][T19753] team0: Port device team_slave_0 added
[  367.578682][T19753] team0: Port device team_slave_1 added
[  367.627288][T19753] batman_adv: batadv0: Adding interface: batadv_slave_0
[  367.629737][T19753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.637903][T19753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  367.653664][T19753] batman_adv: batadv0: Adding interface: batadv_slave_1
[  367.655986][T19753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.666330][T19753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  367.704964][T19753] hsr_slave_0: entered promiscuous mode
[  367.707645][T19753] hsr_slave_1: entered promiscuous mode
[  367.710325][T19753] debugfs: 'hsr0' already exists in 'hsr'
[  367.712214][T19753] Cannot create hsr debugfs directory
[  368.470523][ T5811] Bluetooth: hci6: command tx timeout
[  368.549806][   T55] Bluetooth: hci7: command tx timeout
[  368.552954][ T5811] Bluetooth: hci8: command tx timeout
[  369.669663][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 243 seconds
[  369.674127][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 243 seconds
[  369.678249][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 243 seconds
[  369.682419][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 243 seconds
[  370.549318][ T5811] Bluetooth: hci6: command tx timeout
[  370.629347][ T5811] Bluetooth: hci8: command tx timeout
[  370.629670][   T55] Bluetooth: hci7: command tx timeout
[  372.629371][   T55] Bluetooth: hci6: command tx timeout
[  372.709466][   T55] Bluetooth: hci7: command tx timeout
[  372.709637][ T5811] Bluetooth: hci8: command tx timeout
[  374.709400][ T5811] Bluetooth: hci6: command tx timeout
[  374.789340][ T5811] Bluetooth: hci8: command tx timeout
[  374.799349][ T5811] Bluetooth: hci7: command tx timeout
[  378.720505][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 252 seconds
[  378.723827][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 252 seconds
[  378.727270][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 252 seconds
[  378.730808][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 252 seconds
[  383.843833][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  383.846429][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  387.769461][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 261 seconds
[  387.773339][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 261 seconds
[  387.776813][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 261 seconds
[  387.780452][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 261 seconds
[  396.789828][   T25] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 270 seconds
[  396.794115][   T25] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 270 seconds
[  396.798482][   T25] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 270 seconds
[  396.803047][   T25] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 270 seconds
[  405.830264][   T53] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 279 seconds
[  405.834541][   T53] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 279 seconds
[  405.838659][   T53] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 279 seconds
[  405.843168][   T53] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 279 seconds
[  414.870022][   T53] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 288 seconds
[  414.874331][   T53] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 288 seconds
[  414.878833][   T53] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 288 seconds
[  414.884872][   T53] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 288 seconds
[  423.909377][   T53] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 297 seconds
[  423.913712][   T53] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 297 seconds
[  423.918344][   T53] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 297 seconds
[  423.923718][   T53] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 297 seconds
[  426.427709][   T55] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  426.435443][ T5817] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  426.439590][ T5817] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  426.441964][T19778] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  426.443144][ T5817] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  426.446580][T19778] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  426.448294][ T5817] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  426.450818][T19778] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  426.458619][ T5817] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  426.465608][ T5817] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  426.490600][T19775] lo speed is unknown, defaulting to 1000
[  426.569411][T19777] lo speed is unknown, defaulting to 1000
[  426.746665][T19775] chnl_net:caif_netlink_parms(): no params data found
[  426.810703][T19775] bridge0: port 1(bridge_slave_0) entered blocking state
[  426.813179][T19775] bridge0: port 1(bridge_slave_0) entered disabled state
[  426.815599][T19775] bridge_slave_0: entered allmulticast mode
[  426.818457][T19775] bridge_slave_0: entered promiscuous mode
[  426.824510][T19775] bridge0: port 2(bridge_slave_1) entered blocking state
[  426.826854][T19775] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.830371][T19775] bridge_slave_1: entered allmulticast mode
[  426.833552][T19775] bridge_slave_1: entered promiscuous mode
[  426.867958][T19775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  426.877823][T19775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  426.902551][T19775] team0: Port device team_slave_0 added
[  426.910187][T19775] team0: Port device team_slave_1 added
[  426.942477][T19775] batman_adv: batadv0: Adding interface: batadv_slave_0
[  426.945384][T19775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.955960][T19775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  426.964191][T19775] batman_adv: batadv0: Adding interface: batadv_slave_1
[  426.966858][T19775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  426.977376][T19775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.013006][T19775] hsr_slave_0: entered promiscuous mode
[  427.015295][T19775] hsr_slave_1: entered promiscuous mode
[  427.017423][T19775] debugfs: 'hsr0' already exists in 'hsr'
[  427.019422][T19775] Cannot create hsr debugfs directory
[  427.024943][T19777] chnl_net:caif_netlink_parms(): no params data found
[  427.106025][T19777] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.108401][T19777] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.111270][T19777] bridge_slave_0: entered allmulticast mode
[  427.114448][T19777] bridge_slave_0: entered promiscuous mode
[  427.121823][T19777] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.124128][T19777] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.126510][T19777] bridge_slave_1: entered allmulticast mode
[  427.129707][T19777] bridge_slave_1: entered promiscuous mode
[  427.168210][T19777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.178083][T19777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.208317][T19777] team0: Port device team_slave_0 added
[  427.211966][T19777] team0: Port device team_slave_1 added
[  427.227370][T19777] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.229861][T19777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.237777][T19777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.242863][T19777] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.245132][T19777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.253637][T19777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  427.282370][T19777] hsr_slave_0: entered promiscuous mode
[  427.284962][T19777] hsr_slave_1: entered promiscuous mode
[  427.287134][T19777] debugfs: 'hsr0' already exists in 'hsr'
[  427.288969][T19777] Cannot create hsr debugfs directory
[  427.463449][ T5817] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  427.467761][ T5817] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  427.471334][ T5817] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  427.474529][ T5817] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  427.477433][ T5817] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  427.508188][T19793] lo speed is unknown, defaulting to 1000
[  427.808807][T19793] chnl_net:caif_netlink_parms(): no params data found
[  427.856610][T19793] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.858989][T19793] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.861520][T19793] bridge_slave_0: entered allmulticast mode
[  427.864434][T19793] bridge_slave_0: entered promiscuous mode
[  427.867975][T19793] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.870888][T19793] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.873552][T19793] bridge_slave_1: entered allmulticast mode
[  427.876344][T19793] bridge_slave_1: entered promiscuous mode
[  427.893521][T19793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.898443][T19793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.916498][T19793] team0: Port device team_slave_0 added
[  427.920109][T19793] team0: Port device team_slave_1 added
[  427.934792][T19793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.937026][T19793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.947126][T19793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.953336][T19793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  427.956185][T19793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  427.966246][T19793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.006994][T19793] hsr_slave_0: entered promiscuous mode
[  428.011684][T19793] hsr_slave_1: entered promiscuous mode
[  428.014805][T19793] debugfs: 'hsr0' already exists in 'hsr'
[  428.017179][T19793] Cannot create hsr debugfs directory
[  428.469212][ T5195] Bluetooth: hci9: command tx timeout
[  428.549408][ T5195] Bluetooth: hci10: command tx timeout
[  429.519285][ T5195] Bluetooth: hci11: command tx timeout
[  430.549438][   T55] Bluetooth: hci9: command tx timeout
[  430.629281][   T55] Bluetooth: hci10: command tx timeout
[  431.589249][   T55] Bluetooth: hci11: command tx timeout
[  431.991897][   T55] Bluetooth: hci5: command 0x0406 tx timeout
[  431.996150][   T55] Bluetooth: hci3: command 0x0406 tx timeout
[  431.998869][T19778] Bluetooth: hci4: command 0x0406 tx timeout
[  432.629208][ T5195] Bluetooth: hci9: command tx timeout
[  432.709279][ T5195] Bluetooth: hci10: command tx timeout
[  432.952557][   T53] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 306 seconds
[  432.956737][   T53] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 306 seconds
[  432.961537][   T53] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 306 seconds
[  432.965752][   T53] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 306 seconds
[  433.669256][ T5195] Bluetooth: hci11: command tx timeout
[  434.719267][ T5195] Bluetooth: hci9: command tx timeout
[  434.789650][ T5195] Bluetooth: hci10: command tx timeout
[  435.759192][ T5195] Bluetooth: hci11: command tx timeout
[  441.989549][   T53] block nbd0: Possible stuck request ffff88810b060000: control (read@0,1024B). Runtime 315 seconds
[  441.993067][   T53] block nbd0: Possible stuck request ffff88810b060200: control (read@1024,1024B). Runtime 315 seconds
[  441.996440][   T53] block nbd0: Possible stuck request ffff88810b060400: control (read@2048,1024B). Runtime 315 seconds
[  442.000222][   T53] block nbd0: Possible stuck request ffff88810b060600: control (read@3072,1024B). Runtime 315 seconds
[  445.272844][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  445.275573][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  446.550055][   T34] INFO: task syz.0.5979:19686 blocked for more than 143 seconds.
[  446.553268][   T34]       Not tainted syzkaller #0
[  446.557395][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  446.562776][   T34] task:syz.0.5979      state:D stack:26240 pid:19686 tgid:19679 ppid:5813   task_flags:0x480140 flags:0x00080002
[  446.567641][   T34] Call Trace:
[  446.581288][   T34]  <TASK>
[  446.582591][   T34]  __schedule+0x1585/0x5340
[  446.584546][   T34]  ? do_raw_spin_lock+0x12b/0x2f0
[  446.586636][   T34]  ? __pfx___schedule+0x10/0x10
[  446.588698][   T34]  ? schedule+0x90/0x360
[  446.591203][   T34]  schedule+0x164/0x360
[  446.592975][   T34]  blk_mq_freeze_queue_wait+0x101/0x180
[  446.595194][   T34]  ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10
[  446.597711][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  446.600918][   T34]  queue_limits_commit_update_frozen+0x55/0xd0
[  446.603414][   T34]  nbd_set_size+0x454/0x680
[  446.605251][   T34]  ? __pfx_nbd_set_size+0x10/0x10
[  446.607270][   T34]  ? nla_memcpy+0x5b/0xc0
[  446.608868][   T34]  nbd_genl_reconfigure+0x7f5/0x1ea0
[  446.611859][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  446.613646][   T34]  ? rcu_is_watching+0x15/0xb0
[  446.615219][   T34]  ? trace_kmalloc+0x2a/0x110
[  446.616740][   T34]  ? __nla_parse+0x40/0x60
[  446.618277][   T34]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  446.622254][   T34]  genl_family_rcv_msg_doit+0x22a/0x330
[  446.624116][   T34]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  446.626089][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  446.627742][   T34]  genl_rcv_msg+0x61c/0x7a0
[  446.629932][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.631538][   T34]  ? __pfx_nbd_genl_reconfigure+0x10/0x10
[  446.633484][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  446.635130][   T34]  netlink_rcv_skb+0x232/0x4b0
[  446.636663][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.638453][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  446.642334][   T34]  ? down_read+0x272/0x2e0
[  446.644227][   T34]  ? genl_rcv+0xd/0x40
[  446.645948][   T34]  genl_rcv+0x28/0x40
[  446.647633][   T34]  netlink_unicast+0x80f/0x9b0
[  446.651654][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  446.653822][   T34]  ? netlink_sendmsg+0x650/0xb40
[  446.655933][   T34]  ? skb_put+0x11b/0x210
[  446.657742][   T34]  netlink_sendmsg+0x813/0xb40
[  446.661028][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.663123][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  446.664794][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.666683][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.668717][   T34]  ____sys_sendmsg+0xa68/0xad0
[  446.671385][   T34]  ? futex_unqueue+0x211/0x240
[  446.673396][   T34]  ? __pfx_____sys_sendmsg+0x10/0x10
[  446.675567][   T34]  ? import_iovec+0x73/0xa0
[  446.677241][   T34]  ___sys_sendmsg+0x2a5/0x360
[  446.678831][   T34]  ? __pfx____sys_sendmsg+0x10/0x10
[  446.681015][   T34]  ? futex_wait+0x29a/0x380
[  446.682704][   T34]  ? __fget_files+0x2a/0x420
[  446.684474][   T34]  ? __fget_files+0x3a0/0x420
[  446.686407][   T34]  __x64_sys_sendmsg+0x1bd/0x2a0
[  446.688513][   T34]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  446.692540][   T34]  ? rcu_is_watching+0x15/0xb0
[  446.694582][   T34]  do_syscall_64+0x14d/0xf80
[  446.696319][   T34]  ? trace_irq_disable+0x3b/0x150
[  446.698072][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.700859][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.703011][   T34] RIP: 0033:0x7f0f1379c799
[  446.704448][   T34] RSP: 002b:00007f0f145eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  446.707143][   T34] RAX: ffffffffffffffda RBX: 00007f0f13a16090 RCX: 00007f0f1379c799
[  446.712378][   T34] RDX: 0000000000028080 RSI: 0000200000000640 RDI: 0000000000000007
[  446.714909][   T34] RBP: 00007f0f13832bd9 R08: 0000000000000000 R09: 0000000000000000
[  446.717496][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  446.720466][   T34] R13: 00007f0f13a16128 R14: 00007f0f13a16090 R15: 00007ffd451c3c78
[  446.723405][   T34]  </TASK>
[  446.724726][   T34] INFO: task syz.1.5986:19704 blocked for more than 143 seconds.
[  446.727659][   T34]       Not tainted syzkaller #0
[  446.731903][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  446.735152][   T34] task:syz.1.5986      state:D stack:25088 pid:19704 tgid:19703 ppid:5808   task_flags:0x400140 flags:0x00080002
[  446.740015][   T34] Call Trace:
[  446.741319][   T34]  <TASK>
[  446.742479][   T34]  __schedule+0x1585/0x5340
[  446.744243][   T34]  ? __pfx___schedule+0x10/0x10
[  446.746140][   T34]  ? schedule+0x90/0x360
[  446.747842][   T34]  schedule+0x164/0x360
[  446.750922][   T34]  schedule_preempt_disabled+0x13/0x30
[  446.753205][   T34]  __mutex_lock+0x7fe/0x1300
[  446.754671][   T34]  ? __mutex_lock+0x5ac/0x1300
[  446.756136][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  446.757589][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  446.759890][   T34]  ? radix_tree_lookup+0x240/0x290
[  446.761530][   T34]  genl_rcv_msg+0x10b/0x7a0
[  446.762945][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.764532][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  446.766115][   T34]  netlink_rcv_skb+0x232/0x4b0
[  446.767642][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.769877][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  446.771567][   T34]  ? down_read+0x272/0x2e0
[  446.773005][   T34]  ? genl_rcv+0xd/0x40
[  446.774308][   T34]  genl_rcv+0x28/0x40
[  446.775590][   T34]  netlink_unicast+0x80f/0x9b0
[  446.777149][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  446.778815][   T34]  ? netlink_sendmsg+0x650/0xb40
[  446.781136][   T34]  ? skb_put+0x11b/0x210
[  446.782567][   T34]  netlink_sendmsg+0x813/0xb40
[  446.784195][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.786057][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  446.787763][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.790582][   T34]  __sys_sendto+0x709/0x7a0
[  446.792192][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  446.793886][   T34]  ? exc_page_fault+0x6a/0xc0
[  446.795450][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[  446.797199][   T34]  __x64_sys_sendto+0xde/0x100
[  446.798839][   T34]  do_syscall_64+0x14d/0xf80
[  446.802719][   T34]  ? trace_irq_disable+0x3b/0x150
[  446.804409][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.806379][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.808361][   T34] RIP: 0033:0x7f49db35cfce
[  446.810205][   T34] RSP: 002b:00007f49dc1afe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  446.812997][   T34] RAX: ffffffffffffffda RBX: 00007f49dc1b16c0 RCX: 00007f49db35cfce
[  446.815568][   T34] RDX: 0000000000000020 RSI: 00007f49dc1b0000 RDI: 0000000000000006
[  446.818223][   T34] RBP: 0000000000000000 R08: 00007f49dc1aff04 R09: 000000000000000c
[  446.821347][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  446.823948][   T34] R13: 00007f49dc1aff58 R14: 00007f49dc1b0000 R15: 0000000000000000
[  446.826470][   T34]  </TASK>
[  446.827513][   T34] INFO: task syz.2.5987:19707 blocked for more than 143 seconds.
[  446.830147][   T34]       Not tainted syzkaller #0
[  446.832125][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  446.834940][   T34] task:syz.2.5987      state:D stack:26120 pid:19707 tgid:19706 ppid:5812   task_flags:0x400140 flags:0x00080002
[  446.838796][   T34] Call Trace:
[  446.840055][   T34]  <TASK>
[  446.841223][   T34]  __schedule+0x1585/0x5340
[  446.842722][   T34]  ? __pfx___schedule+0x10/0x10
[  446.844324][   T34]  ? schedule+0x90/0x360
[  446.845734][   T34]  schedule+0x164/0x360
[  446.847114][   T34]  schedule_preempt_disabled+0x13/0x30
[  446.848945][   T34]  __mutex_lock+0x7fe/0x1300
[  446.851409][   T34]  ? __mutex_lock+0x5ac/0x1300
[  446.853038][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  446.855099][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  446.856773][   T34]  ? radix_tree_lookup+0x240/0x290
[  446.858495][   T34]  genl_rcv_msg+0x10b/0x7a0
[  446.860831][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.862462][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  446.864066][   T34]  netlink_rcv_skb+0x232/0x4b0
[  446.865622][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.867238][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  446.868918][   T34]  ? down_read+0x272/0x2e0
[  446.872150][   T34]  ? genl_rcv+0xd/0x40
[  446.873511][   T34]  genl_rcv+0x28/0x40
[  446.874826][   T34]  netlink_unicast+0x80f/0x9b0
[  446.876388][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  446.878109][   T34]  ? netlink_sendmsg+0x650/0xb40
[  446.879919][   T34]  ? skb_put+0x11b/0x210
[  446.881512][   T34]  netlink_sendmsg+0x813/0xb40
[  446.883116][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.884842][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  446.886432][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.888134][   T34]  __sys_sendto+0x709/0x7a0
[  446.890187][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  446.891855][   T34]  ? exc_page_fault+0x6a/0xc0
[  446.893382][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[  446.895088][   T34]  __x64_sys_sendto+0xde/0x100
[  446.896659][   T34]  do_syscall_64+0x14d/0xf80
[  446.898137][   T34]  ? trace_irq_disable+0x3b/0x150
[  446.900355][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.902330][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.904231][   T34] RIP: 0033:0x7f1b8d55cfce
[  446.905709][   T34] RSP: 002b:00007f1b8e43ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  446.908360][   T34] RAX: ffffffffffffffda RBX: 00007f1b8e43e6c0 RCX: 00007f1b8d55cfce
[  446.911475][   T34] RDX: 0000000000000020 RSI: 00007f1b8e43d000 RDI: 0000000000000003
[  446.914028][   T34] RBP: 0000000000000000 R08: 00007f1b8e43cf04 R09: 000000000000000c
[  446.916558][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  446.919225][   T34] R13: 00007f1b8e43cf58 R14: 00007f1b8e43d000 R15: 0000000000000000
[  446.921988][   T34]  </TASK>
[  446.923048][   T34] INFO: task syz.2.5987:19709 blocked for more than 143 seconds.
[  446.925531][   T34]       Not tainted syzkaller #0
[  446.927155][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  446.930378][   T34] task:syz.2.5987      state:D stack:25832 pid:19709 tgid:19706 ppid:5812   task_flags:0x400140 flags:0x00080002
[  446.934406][   T34] Call Trace:
[  446.935513][   T34]  <TASK>
[  446.936490][   T34]  __schedule+0x1585/0x5340
[  446.937958][   T34]  ? __pfx___schedule+0x10/0x10
[  446.940269][   T34]  ? schedule+0x90/0x360
[  446.941687][   T34]  schedule+0x164/0x360
[  446.943044][   T34]  schedule_preempt_disabled+0x13/0x30
[  446.944797][   T34]  __mutex_lock+0x7fe/0x1300
[  446.946289][   T34]  ? __mutex_lock+0x5ac/0x1300
[  446.947827][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  446.950892][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  446.952553][   T34]  ? radix_tree_lookup+0x240/0x290
[  446.954207][   T34]  genl_rcv_msg+0x10b/0x7a0
[  446.955720][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.958319][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  446.960757][   T34]  netlink_rcv_skb+0x232/0x4b0
[  446.962450][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  446.964085][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  446.965815][   T34]  ? down_read+0x272/0x2e0
[  446.967313][   T34]  ? genl_rcv+0xd/0x40
[  446.968730][   T34]  genl_rcv+0x28/0x40
[  446.970229][   T34]  netlink_unicast+0x80f/0x9b0
[  446.972073][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  446.973798][   T34]  ? netlink_sendmsg+0x650/0xb40
[  446.975396][   T34]  ? skb_put+0x11b/0x210
[  446.976794][   T34]  netlink_sendmsg+0x813/0xb40
[  446.978427][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  446.980949][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  446.982630][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  446.984268][   T34]  __sys_sendto+0x709/0x7a0
[  446.985762][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  446.987461][   T34]  ? fd_install+0x94/0x3d0
[  446.989968][   T34]  ? fd_install+0x306/0x3d0
[  446.991534][   T34]  __x64_sys_sendto+0xde/0x100
[  446.993285][   T34]  do_syscall_64+0x14d/0xf80
[  446.994867][   T34]  ? trace_irq_disable+0x3b/0x150
[  446.996485][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.998544][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.000622][   T34] RIP: 0033:0x7f1b8d55cfce
[  447.002340][   T34] RSP: 002b:00007f1b8e41be88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  447.004984][   T34] RAX: ffffffffffffffda RBX: 00007f1b8e41d6c0 RCX: 00007f1b8d55cfce
[  447.007481][   T34] RDX: 0000000000000020 RSI: 00007f1b8e41c000 RDI: 000000000000000b
[  447.010831][   T34] RBP: 0000000000000000 R08: 00007f1b8e41bf04 R09: 000000000000000c
[  447.013395][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000b
[  447.015907][   T34] R13: 00007f1b8e41bf58 R14: 00007f1b8e41c000 R15: 0000000000000000
[  447.018436][   T34]  </TASK>
[  447.019657][   T34] INFO: task syz.2.5987:19711 blocked for more than 143 seconds.
[  447.022277][   T34]       Not tainted syzkaller #0
[  447.023928][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  447.026688][   T34] task:syz.2.5987      state:D stack:26376 pid:19711 tgid:19706 ppid:5812   task_flags:0x400140 flags:0x00080002
[  447.032283][   T34] Call Trace:
[  447.033429][   T34]  <TASK>
[  447.034410][   T34]  __schedule+0x1585/0x5340
[  447.035905][   T34]  ? __pfx___schedule+0x10/0x10
[  447.037485][   T34]  ? schedule+0x90/0x360
[  447.038992][   T34]  schedule+0x164/0x360
[  447.041227][   T34]  schedule_preempt_disabled+0x13/0x30
[  447.043015][   T34]  __mutex_lock+0x7fe/0x1300
[  447.044552][   T34]  ? __mutex_lock+0x5ac/0x1300
[  447.046140][   T34]  ? genl_rcv_msg+0x10b/0x7a0
[  447.047653][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  447.050419][   T34]  ? radix_tree_lookup+0x240/0x290
[  447.052570][   T34]  genl_rcv_msg+0x10b/0x7a0
[  447.054248][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  447.055892][   T34]  ? __lock_acquire+0x6b5/0x2cf0
[  447.057473][   T34]  netlink_rcv_skb+0x232/0x4b0
[  447.060082][   T34]  ? __pfx_genl_rcv_msg+0x10/0x10
[  447.061973][   T34]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  447.063749][   T34]  ? down_read+0x272/0x2e0
[  447.065166][   T34]  ? genl_rcv+0xd/0x40
[  447.066462][   T34]  genl_rcv+0x28/0x40
[  447.067762][   T34]  netlink_unicast+0x80f/0x9b0
[  447.069741][   T34]  ? __pfx_netlink_unicast+0x10/0x10
[  447.072208][   T34]  ? netlink_sendmsg+0x650/0xb40
[  447.073950][   T34]  ? skb_put+0x11b/0x210
[  447.075353][   T34]  netlink_sendmsg+0x813/0xb40
[  447.076959][   T34]  ? __pfx_netlink_sendmsg+0x10/0x10
[  447.078823][   T34]  ? aa_sock_msg_perm+0xf1/0x1b0
[  447.080727][   T34]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  447.082720][   T34]  __sys_sendto+0x709/0x7a0
[  447.084237][   T34]  ? __pfx___sys_sendto+0x10/0x10
[  447.085868][   T34]  ? exc_page_fault+0x6a/0xc0
[  447.087375][   T34]  ? do_user_addr_fault+0xc6f/0x1340
[  447.089283][   T34]  __x64_sys_sendto+0xde/0x100
[  447.091021][   T34]  do_syscall_64+0x14d/0xf80
[  447.092505][   T34]  ? trace_irq_disable+0x3b/0x150
[  447.094142][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.096131][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  447.098023][   T34] RIP: 0033:0x7f1b8d55cfce
[  447.100257][   T34] RSP: 002b:00007f1b8e3fae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  447.102882][   T34] RAX: ffffffffffffffda RBX: 00007f1b8e3fc6c0 RCX: 00007f1b8d55cfce
[  447.105391][   T34] RDX: 0000000000000020 RSI: 00007f1b8e3fb000 RDI: 0000000000000003
[  447.107909][   T34] RBP: 0000000000000000 R08: 00007f1b8e3faf04 R09: 000000000000000c
[  447.111369][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  447.113940][   T34] R13: 00007f1b8e3faf58 R14: 00007f1b8e3fb000 R15: 0000000000000000
[  447.116501][   T34]  </TASK>
[  447.117549][   T34] 
[  447.117549][   T34] Showing all locks held in the system:
[  447.121135][   T34] 1 lock held by khungtaskd/34:
[  447.122722][   T34]  #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  447.125898][   T34] 2 locks held by getty/5631:
[  447.127393][   T34]  #0: ffff8881777bc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  447.130683][   T34]  #1: ffffc9000356b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  447.134089][   T34] 1 lock held by udevd/9544:
[  447.135567][   T34]  #0: ffff88810ab51358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  447.138538][   T34] 6 locks held by syz.0.5979/19686:
[  447.141833][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.144579][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.147588][   T34]  #2: ffff88810abc0278 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ea0
[  447.152371][   T34]  #3: ffff88810a62e610 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x263/0x680
[  447.156246][   T34]  #4: ffff88810a62dfb0 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  447.161240][   T34]  #5: ffff88810a62dfe8 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0
[  447.166437][   T34] 2 locks held by syz.1.5986/19704:
[  447.168139][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.171857][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.174802][   T34] 2 locks held by syz.2.5987/19707:
[  447.176485][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.179631][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.182538][   T34] 2 locks held by syz.2.5987/19709:
[  447.184227][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.186915][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.191180][   T34] 2 locks held by syz.2.5987/19711:
[  447.192838][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.195570][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.198487][   T34] 2 locks held by syz-executor/19717:
[  447.200346][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.203066][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.206321][   T34] 2 locks held by syz-executor/19719:
[  447.207997][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.210803][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.213648][   T34] 2 locks held by syz-executor/19721:
[  447.215310][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.217910][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.221158][   T34] 2 locks held by syz-executor/19749:
[  447.223108][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.225757][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.228773][   T34] 2 locks held by syz-executor/19751:
[  447.231937][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.234702][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.237585][   T34] 2 locks held by syz-executor/19753:
[  447.239801][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.242444][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.245397][   T34] 2 locks held by syz-executor/19775:
[  447.247172][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.249970][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.252880][   T34] 2 locks held by syz-executor/19777:
[  447.254623][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.257207][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.261106][   T34] 2 locks held by syz-executor/19793:
[  447.263274][   T34]  #0: ffffffff8fc3a930 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  447.267021][   T34]  #1: ffffffff8fc3a748 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  447.270963][   T34] 
[  447.271738][   T34] =============================================
[  447.271738][   T34] 
[  447.274357][   T34] NMI backtrace for cpu 1
[  447.274365][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  447.274373][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  447.274378][   T34] Call Trace:
[  447.274382][   T34]  <TASK>
[  447.274386][   T34]  dump_stack_lvl+0xe8/0x150
[  447.274399][   T34]  nmi_cpu_backtrace+0x274/0x2d0
[  447.274410][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  447.274420][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  447.274430][   T34]  sys_info+0x135/0x170
[  447.274438][   T34]  watchdog+0xfd9/0x1030
[  447.274450][   T34]  ? watchdog+0x21a/0x1030
[  447.274462][   T34]  kthread+0x388/0x470
[  447.274469][   T34]  ? __pfx_watchdog+0x10/0x10
[  447.274478][   T34]  ? __pfx_kthread+0x10/0x10
[  447.274485][   T34]  ret_from_fork+0x51e/0xb90
[  447.274496][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  447.274504][   T34]  ? __switch_to+0xc7d/0x1450
[  447.274513][   T34]  ? __pfx_kthread+0x10/0x10
[  447.274520][   T34]  ret_from_fork_asm+0x1a/0x30
[  447.274534][   T34]  </TASK>
[  447.274538][   T34] Sending NMI from CPU 1 to CPUs 0:
[  447.314023][    C0] NMI backtrace for cpu 0
[  447.314042][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  447.314054][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  447.314060][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  447.314081][    C0] Code: 3e 6d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 43 dd 1b 00 fb f4 <e9> 7c ea 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  447.314090][    C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000206
[  447.314101][    C0] RAX: 00000000002f5aff RBX: ffffffff819a80dd RCX: 0000000080000001
[  447.314109][    C0] RDX: 0000000000000001 RSI: ffffffff8def2913 RDI: ffffffff8c27ab00
[  447.314117][    C0] RBP: ffffffff8e407eb0 R08: ffff88812103395b R09: 1ffff1102420672b
[  447.314124][    C0] R10: dffffc0000000000 R11: ffffed102420672c R12: ffffffff901189b0
[  447.314131][    C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000
[  447.314137][    C0] FS:  0000000000000000(0000) GS:ffff88818de63000(0000) knlGS:0000000000000000
[  447.314145][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  447.314151][    C0] CR2: 0000564c4949ae38 CR3: 00000001127b2000 CR4: 00000000000006f0
[  447.314189][    C0] Call Trace:
[  447.314197][    C0]  <TASK>
[  447.314202][    C0]  default_idle+0x9/0x20
[  447.314214][    C0]  default_idle_call+0x72/0xb0
[  447.314227][    C0]  do_idle+0x1bd/0x500
[  447.314240][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  447.314256][    C0]  ? __pfx_do_idle+0x10/0x10
[  447.314272][    C0]  cpu_startup_entry+0x43/0x60
[  447.314286][    C0]  rest_init+0x2de/0x300
[  447.314297][    C0]  start_kernel+0x385/0x3d0
[  447.314315][    C0]  x86_64_start_reservations+0x24/0x30
[  447.314327][    C0]  x86_64_start_kernel+0x143/0x1c0
[  447.314338][    C0]  common_startup_64+0x13e/0x147
[  447.314352][    C0]  </TASK>
[  447.389902][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  447.392747][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  447.396400][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  447.400494][   T34] Call Trace:
[  447.401868][   T34]  <TASK>
[  447.403074][   T34]  vpanic+0x56c/0xa60
[  447.404627][   T34]  ? __pfx___schedule+0x10/0x10
[  447.406441][   T34]  ? __pfx_vpanic+0x10/0x10
[  447.408174][   T34]  ? __pfx_console_unlock+0x10/0x10
[  447.410121][   T34]  panic+0xc5/0xd0
[  447.411562][   T34]  ? __pfx_panic+0x10/0x10
[  447.413058][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  447.414880][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  447.416965][   T34]  watchdog+0x1023/0x1030
[  447.418536][   T34]  ? watchdog+0x21a/0x1030
[  447.420206][   T34]  kthread+0x388/0x470
[  447.421633][   T34]  ? __pfx_watchdog+0x10/0x10
[  447.423245][   T34]  ? __pfx_kthread+0x10/0x10
[  447.424950][   T34]  ret_from_fork+0x51e/0xb90
[  447.426677][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  447.428476][   T34]  ? __switch_to+0xc7d/0x1450
[  447.430099][   T34]  ? __pfx_kthread+0x10/0x10
[  447.431666][   T34]  ret_from_fork_asm+0x1a/0x30
[  447.433425][   T34]  </TASK>
[  447.435398][   T34] Kernel Offset: disabled
[  447.436951][   T34] Rebooting in 86400 seconds..
